From ffe7a8071b0cb7759bb55fa14c496f6a40d75a04 Mon Sep 17 00:00:00 2001 From: hc-github-team-secure-vault-core <82990506+hc-github-team-secure-vault-core@users.noreply.github.com> Date: Fri, 21 Apr 2023 09:33:41 -0400 Subject: [PATCH] backport of commit 3e663fcb3816f134469c4493f6a19273035c1fdd (#19421) Co-authored-by: Alexander Scheel --- website/content/docs/secrets/transit/index.mdx | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/website/content/docs/secrets/transit/index.mdx b/website/content/docs/secrets/transit/index.mdx index de81be0e4bf3..db44a6278712 100644 --- a/website/content/docs/secrets/transit/index.mdx +++ b/website/content/docs/secrets/transit/index.mdx @@ -99,6 +99,12 @@ supports HMAC, and behaves identically to other algorithms with respect to the HMAC operations but supports key import. By default, the HMAC key type uses a 256-bit key. +RSA operations use one of the following methods: + + - OAEP (encrypt, decrypt), with SHA-256 hash function and MGF, + - PSS (sign, verify), with configurable hash function also used for MGF, and + - PKCS#1v1.5: (sign, verify), with configurable hash function. + ## Convergent Encryption Convergent encryption is a mode where the same set of plaintext+context always