Internet Assigned Numbers Authority

DNSSEC Delegation Signer (DS) Resource Record (RR) Type Digest Algorithms

Created
2003-10-31
Last Updated
2025-06-10
Available Formats

XML

HTML

Plain text

Registry Included Below

Digest Algorithms

Registration Procedure(s)
Standards Action or Specification Required
Expert(s)
Unassigned
Reference
[RFC3658][RFC4034][RFC4035][RFC9157][RFC-ietf-dnsop-rfc8624-bis-13]
Note
Adding a new entry to the "Digest Algorithms" registry with a
recommended value of "MAY" in the "Use for DNSSEC Delegation",
"Use for DNSSEC Validation", "Implement for DNSSEC Delegation",
or "Implement for DNSSEC Validation" columns SHALL follow the
"Specification Required" policy as defined in [RFC8126].

Adding a new entry to, or changing existing values in, the
"Digest Algorithms" registry for the "Use for DNSSEC Delegation",
"Use for DNSSEC Validation", "Implement for DNSSEC Delegation",
or "Implement for DNSSEC Validation" columns to any other value
than "MAY" requires a Standards Action.

If an item is not marked as "RECOMMENDED", it does not
necessarily mean that it is flawed; rather, it indicates
that the item either has not been through the IETF consensus
process, has limited applicability, or is intended only for
specific use cases.
    
Available Formats

CSV
Value Description Use for DNSSEC Delegation Use for DNSSEC Validation Implement for DNSSEC Delegation Implement for DNSSEC Validation Reference
0 Reserved MUST NOT MUST NOT MUST NOT MUST NOT [RFC3658]
1 SHA-1 MUST NOT RECOMMENDED MUST NOT MUST [RFC3658][RFC-ietf-dnsop-must-not-sha1-09]
2 SHA-256 RECOMMENDED RECOMMENDED MUST MUST [RFC4509]
3 GOST R 34.11-94 MUST NOT MUST NOT MUST NOT MUST NOT [RFC5933][Change the status of GOST Signature Algorithms in DNSSEC in the IETF stream to Historic][RFC-ietf-dnsop-must-not-ecc-gost-07]
4 SHA-384 MAY RECOMMENDED MAY RECOMMENDED [RFC6605]
5 GOST R 34.11-2012 MAY MAY MAY MAY [RFC9558]
6 SM3 MAY MAY MAY MAY [RFC9563]
7-127 Unassigned
128-252 Reserved [RFC-ietf-dnsop-rfc8624-bis-13]
253-254 Reserved for Private Use [RFC-ietf-dnsop-rfc8624-bis-13]
255 Unassigned