I am currently trying to figure out what cryptographic algorithms are applicable when using mutual authentication for TLS with PKI-certificates.
So when I am intitially creating a certificate, I first create a public/private key pair. Afterwards I let some CA sign my public key with some additional information.
So if I want to use that certificate in order to authenticate at the start of a TLS session, do I have to pick an asymmetric signing algorithm to create that initial public/private key pair? An asymmetric encryption algorithm does not work? So for instance I am not allowed to use DLIES or ECIES but have to use something like ECDSA or DSA/DSS?