Class KJUR.asn1.x509.AlgorithmIdentifier

AlgorithmIdentifier ASN.1 structure class The 'params' argument is an associative array and has following parameters:

• name: algorithm name (MANDATORY, ex. sha1, SHA256withRSA)
• asn1params: explicitly specify ASN.1 object for algorithm. (OPTION)
• paramempty: set algorithm parameter to NULL by force. If paramempty is false, algorithm parameter will be set automatically. If paramempty is false and algorithm name is "*withDSA" or "withECDSA" parameter field of AlgorithmIdentifier will be ommitted otherwise it will be NULL by default. (OPTION, DEFAULT = false)

RSA-PSS algorithm names such as SHA{,256,384,512}withRSAandMGF1 are special names. They will set a suite of algorithm OID and multiple algorithm parameters. Its ASN.1 schema is defined in RFC 3447 PKCS#1 2.1 section A.2.3.

id-RSASSA-PSS  OBJECT IDENTIFIER ::= { pkcs-1 10 }
RSASSA-PSS-params ::= SEQUENCE {
  hashAlgorithm      [0] HashAlgorithm    DEFAULT sha1,
  maskGenAlgorithm   [1] MaskGenAlgorithm DEFAULT mgf1SHA1,
  saltLength         [2] INTEGER          DEFAULT 20,
  trailerField       [3] TrailerField     DEFAULT trailerFieldBC }
mgf1SHA1    MaskGenAlgorithm ::= {
  algorithm   id-mgf1,
  parameters  HashAlgorithm : sha1 }
id-mgf1     OBJECT IDENTIFIER ::= { pkcs-1 8 }
TrailerField ::= INTEGER { trailerFieldBC(1) }

Here is a table for PSS parameters:

Name	alg oid	pss hash	maskgen	pss saltlen	trailer
SHAwithRSAandMGF1	1.2.840.113549.1.1.10(rsapss)	default(sha1)	default(mgf1sha1)	default(20)	default(1)
SHA256withRSAandMGF1	1.2.840.113549.1.1.10(rsapss)	sha256	mgf1sha256	32	default(1)
SHA384withRSAandMGF1	1.2.840.113549.1.1.10(rsapss)	sha384	mgf1sha384	48	default(1)
SHA512withRSAandMGF1	1.2.840.113549.1.1.10(rsapss)	sha512	mgf1sha512	64	default(1)

Default value is omitted as defined in ASN.1 schema. These parameters are interoperable to OpenSSL or IAIK toolkit.
NOTE: RSA-PSS algorihtm names are supported since jsrsasign 8.0.21.

new KJUR.asn1.x509.AlgorithmIdentifier({name: "sha1"})
new KJUR.asn1.x509.AlgorithmIdentifier({name: "SHA256withRSA"})
new KJUR.asn1.x509.AlgorithmIdentifier({name: "SHA512withRSAandMGF1"}) // set parameters automatically
new KJUR.asn1.x509.AlgorithmIdentifier({name: "SHA256withRSA", paramempty: true})
new KJUR.asn1.x509.AlgorithmIdentifier({name: "rsaEncryption"})