What cryptographic algorithms does Cryptas PKI support?

primeID CERTIFY is built with crypto-agility as a core design principle, meaning algorithms, key lengths, and certificate formats can be exchanged or migrated with minimal effort rather than requiring a platform replacement each time cryptographic standards evolve.

Confirmed algorithm support:

• Established classical algorithms: Standard RSA and elliptic-curve based algorithms used in conventional X.509 certificates today.
• ML-KEM (FIPS 203): A post-quantum key encapsulation mechanism based on CRYSTALS-Kyber.
• ML-DSA (FIPS 204): A post-quantum digital signature algorithm based on CRYSTALS-Dilithium.
• SLH-DSA (FIPS 205): A post-quantum digital signature algorithm based on SPHINCS+.
• FN-DSA (FIPS 206): Based on FALCON, with support planned as an upcoming addition.

This combination allows organizations to continue operating classical algorithms where appropriate today while building a concrete, supported path toward post-quantum cryptography as standards and threat models continue to evolve.