cryptohub-cng.dll) supports.
These entries are a snapshot and can vary by CryptoHub release. The authoritative capability list for your deployment is what the installed provider advertises and what CryptoHub policy and key metadata permit at runtime. Enumerate supported key types with
cng-manager.exe and verify against your own environment before you rely on any entry below.Symmetric
Asymmetric signing
Asymmetric encryption
Post-quantum signing
Post-quantum key encapsulation (KEM)
Post-quantum algorithms are selected by parameter set rather than by a key length in bits. ML-DSA is a signature algorithm; ML-KEM is a key-encapsulation mechanism.