When Engity signs issued tokens (for JWT, HTTPS, …), we use either the Elliptic Curve Digital Signature Algorithm (ECDSA, with SHA-512) or Edwards-curve Digital Signature Algorithm (EdDSA with Ed25519; depending on support by devices). They work by reducing the computational complexity of solving modular multiplication, then combining this potential solution with a ciphertext value that has been encrypted using a private key. The private key is used to create a digital signature for a message. The signature can be verified by using the corresponding public key. Both cryptographic methods are the latest industry standards with meaningful support for devices and software. In contrast to RSA and DSA, which are both unfortunately still broadly used and known as broken, the mechanisms used by Engity is still known as secure and reliable.
Engity’s advanced & open-source SSH-server Bifröst using OpenID Connect
Bifröst is an advanced open-source SSH server using OpenID Connect and allows automatic provisioning of user access.
Data Security at Engity
Your Customers' Data is Secure with Engity Engity's security team carefully and regularly considers our security strategy to best protect your and your customers' data.