digest
Explicitly specify the digest to sign over. Omit to default to the only supported digest.
If the key stored in hardware supports multiple digests, you need to explicitly specify the digest to use. (By default, hardware keys are configured to only support a single digest.)