| Type | Algorithm | Requirements |
| Block Encryption | AES/3DES | REQUIRED |
| Key Transport | AES-RSA-OEAP 3DES-RSA-v1.5 |
REQUIRED |
| MAC | AES/3DES with SHA1 | OPTIONAL |
| Signature | XML Signature | OPTIONAL |
| (Exclusive) Canonicalization | Canonical XML | OPTIONAL |
| Compression et al | n/a |
16 of 19 |