| Type | Algorithm | Requirements | |
| Block Encryption | AES/3DES | REQUIRED | |
| Key Transport | AES-RSA-OEAP 3DES-RSA-v1.5 |
REQUIRED | |
| MAC | AES/3DES with SHA1 | OPTIONAL | |
| Signature | XML Signature | OPTIONAL | |
| (Exclusive) Canonicalization | Canonical XML | OPTIONAL | |
| Compression et al | n/a | ||
|