digest
Explicitly specify the digest to sign over. Omit to default to a reasonable default choice.
If a key stored in hardware supports multiple digests, you need to explicitly specify the digest to use. (By default, hardware keys are configured to only support a single digest.)