Log in to share your answer and help other learners.
Log in to answerBest Answer · By JanBask Cyber Security Expert
Answered on Jan 24, 2022
While the accepted answer goes into some detail about how the calculation is done, it doesn't address the original question at all - Signature Algorithm, Signature Hash Algorithm, and Thumbprint Algorithm that are present in SSL/TLS certificates - which one is which piece of the equation (especially if Microsoft also mix it up)?
The answer seems fairly simple - from:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/4f8fb14a-256e-4c77-86bc-40c364ec5ed0/certificates-differences-between-signature-algorithm-and-signature-hash-algorithm?forum=winserversecurity and marked as correct answer over there: Differences between "Signature algorithm" and "Signature Hash Algorithm" They are used to determine the signature algorithm and hash function used to sign the certificate. This information is used by certificate chaining engines to validate the signature of the certificate. Certificate chaining engine calculates a hash over a certificate (signed part). The Hash method is selected from the Signature Hash Algorithm field. Then the certificate chaining engine decodes the attached signature by using the signature algorithm specified in the Signature Algorithm field and recovers the signed hash. If both hashes match, then the signature is valid, if they differ, the signature is considered invalid. My addition from another source - Thumbprint Algo - simple non crypto property used to identify the cert on a given system (not authenticate it or verify its validity)
Free tutorials and interview questions from industry experts — learn the skill, then get ready to prove it.
Step-by-step Cyber Security guides from industry experts
Common Cyber Security interview questions, answered
Guides, tips and career advice on Cyber Security from JanBask experts.
Cyber Security Prepare with 100 Cyber Security Interview Questions & Answers
Boost your interview confidence learn answers to 101 common cybersecurity questions, from basics to advanced techniques.
Cyber Security AI in Cybersecurity: The Double-Edged Sword
Explore how AI is reshaping cybersecurity as a double-edged sword. Learn how attackers use AI for sophisticated threats and how…
Cyber Security Exploring the Advantages and Disadvantages of Ethical Hacking
Discover the key advantages and disadvantages of ethical hacking from enhancing security and regulatory compliance to potential…
Cyber Security Top Cyber Security Projects Ideas to Consider in 2025
Explore 19 practical cybersecurity project ideas for 2025, from AI threat detection to honeypots. Build skills, boost your…