Movatterモバイル変換

• Domains
• Protocols
• Numbers
• About

Created

2003-11-03

Last Updated

2025-11-13

Available Formats

XML
HTML
Plain text

Registries Included Below

• DNS Security Algorithm Numbers
• DNS KEY Record Diffie-Hellman Prime Lengths
• DNS KEY Record Diffie-Hellman Well-Known Prime/Generator Pairs

DNS Security Algorithm Numbers

Registration Procedure(s)

Standards Action or Specification Required

Expert(s)

Unassigned

Reference

[RFC4034][RFC3755][RFC6014][RFC6944][RFC-ietf-dnsop-rfc8624-bis-13]

Note

Adding a new entry to the "DNS Security Algorithm Numbers”registry with a recommended value of "MAY" in the "Use for DNSSECSigning", "Use for DNSSEC Validation", "Implement for DNSSECSigning", or "Implement for DNSSEC Validation" columns will besubject to the Specification Required policy as defined in [RFC8126] in order to promote continued evolution of DNSSECalgorithms and DNSSEC agility. New entries added through theSpecification Required process will have the value of "MAY” forall columns.Adding a new entry to, or changing an existing value in, the “DNSSecurity Algorithm Numbers" registry that has any value other than"MAY" in the "Use for DNSSEC Signing", "Use for DNSSECValidation", "Implement for DNSSEC Signing", or "Implement forDNSSEC Validation" columns requires Standards Action.If an item is not marked as "RECOMMENDED", it does not necessarily meanthat it is flawed; rather, it indicates that the item either has not beenthrough the IETF consensus process, has limited applicability, or isintended only for specific use cases.

Note

The KEY, SIG, DNSKEY, RRSIG, DS, and CERT RRs use an 8-bit number usedto identify the security algorithm being used.All algorithm numbers in this registry may be used in CERT RRs. Zonesigning (DNSSEC) and transaction security mechanisms (SIG(0) and TSIG)make use of particular subsets of these algorithms. Only algorithmsusable for zone signing may appear in DNSKEY, RRSIG, and DS RRs.Only those usable for SIG(0) and TSIG may appear in SIG and KEY RRs.* There has been no determination of standardization of the use of thisalgorithm with Transaction Security.

Available Formats

CSV

DNS KEY Record Diffie-Hellman Prime Lengths

Registration Procedure(s)

IETF Review

Reference

[RFC2539]

Available Formats

CSV

DNS KEY Record Diffie-Hellman Well-Known Prime/Generator Pairs

Reference

[RFC2539]

Available Formats

CSV