The accepted signature schemes are DSA (FIPS 186-4) with at least a 3072-bit modulus for MODERATE only; ECDSA (FIPS 186-4) with 256-bit to 384-bit keys for MODERATE and 512-bit keys or Curve448 for ADVANCED; RSA-PSS and the RSA Digital Signature Scheme (PKCS #1 v2.2, ISO/IEC 9796-2) with 3072-bit moduli for MODERATE only; and Merkle (hash-based) signatures using the accepted hash functions with an HMAC-based pseudo-random function family.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.