---
type: query
title: "Key Encipherment Technical Deep Dive"
created: 2026-07-01
tags: []
related: []
---

# Key Encipherment Technical Deep Dive

The wiki notes that "Key Encipherment" is a requirement for Shibboleth that necessitates RSA over EC keys, but it does not explain *why* this is the case or what "Key Encipherment" specifically entails in the context of the Shibboleth SAML/XML signature and encryption workflow. Clarifying this would prevent future confusion when choosing key types for other identity providers.
