RFC 6944: Applicability Statement: DNS Security (DNSSEC) DNSKEY Algorithm Implementation Status

The DNS Security Extensions (DNSSEC) requires the use of cryptographic algorithm suites for generating digital signatures over DNS data. There is currently an…

Read RFC 6944 on the RFC Editor

Outgoing relationships (13 related RFCs)

Updates, Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Updates, Normative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Updates, Normative reference — RFC 3110: RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)
Updates, Normative reference — RFC 2536: DSA KEYs and SIGs in the Domain Name System (DNS)
Updates, Normative reference — RFC 5702: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
Updates, Normative reference — RFC 5933: Use of GOST Signature Algorithms in DNSKEY and RRSIG Resource Records for DNSSEC
Updates, Normative reference — RFC 2539: Storage of Diffie-Hellman Keys in the Domain Name System (DNS)
Updates, Normative reference — RFC 4398: Storing Certificates in the Domain Name System (DNS)
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 4509: Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)
Normative reference — RFC 6014: Cryptographic Algorithm Identifier Allocation for DNSSEC

Incoming relationships (1 related RFC)

Obsoleted by — RFC 8624: Algorithm Implementation Requirements and Usage Guidance for DNSSEC