Recommended hash pairings (not enforced by JPGPJ; Bouncy Castle fails at runtime if invalid): RSA / DSA: SHA-256 or SHA-512 ECDSA (NIST P-256): SHA-256; P-384: SHA-384; P-521: SHA-512 Ed25519: SHA-512 ...