RFC 5702: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC

This document describes how to produce RSA/SHA-256 and RSA/SHA-512 DNSKEY and RRSIG resource records for use in the Domain Name System Security Extensions…

Read RFC 5702 on the RFC Editor

Outgoing relationships (8 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 3110: RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)
Informative reference — RFC 3447: Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1
Informative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Informative reference — RFC 4509: Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)

Incoming relationships (9 related RFCs)

Updated by, Normatively referenced by — RFC 6944: Applicability Statement: DNS Security (DNSSEC) DNSKEY Algorithm Implementation Status
Normatively referenced by — RFC 9364: DNS Security Extensions (DNSSEC)
Normatively referenced by — RFC 6781: DNSSEC Operational Practices, Version 2
Normatively referenced by — RFC 7401: Host Identity Protocol Version 2 (HIPv2)
Normatively referenced by — RFC 5936: DNS Zone Transfer Protocol (AXFR)
Normatively referenced by — RFC 7574: Peer-to-Peer Streaming Peer Protocol (PPSPP)
Normatively referenced by — RFC 7958: DNSSEC Trust Anchor Publication for the Root Zone
Informatively referenced by — RFC 9904: DNSSEC Cryptographic Algorithm Recommendation Update Process
Informatively referenced by — RFC 6725: DNS Security (DNSSEC) DNSKEY Algorithm IANA Registry Updates