Package com.verisign.epp.codec.secdnsext.v11

Class EPPSecDNSAlgorithm

java.lang.Object
com.verisign.epp.codec.secdnsext.v11.EPPSecDNSAlgorithm
public class EPPSecDNSAlgorithm extends Object
http://www.ietf.org/rfc/rfc4034.txt
A.1. DNSSEC Algorithm Types
The DNSKEY, RRSIG, and DS RRs use an 8-bit number to identify the security algorithm being used. These values are stored in the "Algorithm number" field in the resource record RDATA. Some algorithms are usable only for zone signing (DNSSEC), some only for transaction security mechanisms (SIG(0) and TSIG), and some for both. Those usable for zone signing may appear in DNSKEY, RRSIG, and DS RRs. Those usable for transaction security would be present in SIG(0) and KEY RRs, as described in [RFC2931].
DNSSEC Algorithms Types
Zone
Value Algorithm [Mnemonic] Signing References
----- -------------------- --------- ----------
0 reserved
1 RSA/MD5 [RSAMD5] n [RFC2537]
2 Diffie-Hellman [DH] n [RFC2539]
3 DSA/SHA-1 [DSA] y [RFC2536]
4 Elliptic Curve [ECC] TBA
5 RSA/SHA-1 [RSASHA1] y [RFC3110]
8 RSA/SHA-256 [RSASHA256] y [draft-ietf-dnsext-dnssec-rsasha256-14]
10 RSA/SHA-512 [RSASHA512] y [draft-ietf-dnsext-dnssec-rsasha256-14]
13 ECDSA Curve P-256 with SHA-256 y [draft-ietf-dnsext-ecdsa]
14 ECDSA Curve P-384 with SHA-384 y [draft-ietf-dnsext-ecdsa]
252 Indirect [INDIRECT] n
253 Private [PRIVATEDNS] y
254 Private [PRIVATEOID] y
255 reserved

6 - 251 Available for assignment by IETF Standards Action.

  • Field Details