Key types supported by language

The following tables list the key types each primitive supports, classified by language.

AEAD

Implementation Java C++
(BoringSSL)		 C++
(OpenSSL)		 Objective-C Go Python
AES-GCM
 yes 1 yes yes yes yes yes
AES-GCM-SIV
 yes 2 yes no no yes yes
AES-CTR-HMAC
 yes yes yes yes yes yes
AES-EAX
 yes yes yes yes no yes
KMS Envelope
 yes yes yes no yes yes
CHACHA20-POLY1305
 yes no no no yes no
XCHACHA20-POLY1305
 yes yes no yes yes yes

Streaming AEAD

Implementation Java C++
(BoringSSL)		 C++
(OpenSSL)		 Objective-C Go Python
AES-GCM-HKDF-STREAMING
 yes yes yes no yes yes
AES-CTR-HMAC-STREAMING
 yes yes yes no yes yes

Deterministic AEAD

Implementation Java C++
(BoringSSL)		 C++
(OpenSSL)		 Objective-C Go Python
AES-SIV
 yes yes yes yes yes yes

MAC

Implementation Java C++
(BoringSSL)		 C++
(OpenSSL)		 Objective-C Go Python
HMAC-SHA2
 yes yes yes yes yes yes
AES-CMAC
 yes yes yes yes yes yes

PRF

Implementation Java C++
(BoringSSL)		 C++
(OpenSSL)		 Objective-C Go Python
HKDF-SHA2
 yes yes yes no yes yes
HMAC-SHA2
 yes yes yes no yes yes
AES-CMAC
 yes yes yes no yes yes

Signature

Implementation Java C++
(BoringSSL)		 C++
(OpenSSL)		 Objective-C Go Python
ECDSA over NIST curves
 yes yes yes yes yes yes
Ed25519
 yes yes yes yes yes yes
RSA-SSA-PKCS1
 yes yes yes yes yes yes
RSA-SSA-PSS
 yes yes yes yes yes yes

Hybrid Encryption

Implementation Java C++
(BoringSSL)		 C++
(OpenSSL)		 Objective-C Go Python
HPKE
 yes yes no no yes yes
ECIES with AEAD and HKDF
 yes 3 yes yes yes yes yes
ECIES with DeterministicAEAD and HKDF
 yes 4 yes yes no yes yes

JWT MAC

Implementation Java C++
(BoringSSL)		 C++
(OpenSSL)		 Objective-C Go Python
JWT HMAC-SHA2
 yes yes yes no yes yes

JWT Signature

Implementation Java C++
(BoringSSL)		 C++
(OpenSSL)		 Objective-C Go Python
JWT ECDSA over NIST curves
 yes yes yes no yes yes
JWT RSA-SSA-PKCS1
 yes yes yes no yes yes
JWT RSA-SSA-PSS
 yes yes yes no yes yes

  1. AES-GCM does not work properly on Android <=19.  ↩

  2. Requires Conscrypt to be installed as a JCE security provider.  ↩

  3. Requires a NIST curve.  ↩

  4. Requires a NIST curve.  ↩