Internet Assigned Numbers Authority

                                      DNSSEC Delegation Signer (DS) Resource Record (RR) Type Digest Algorithms

   Created
   2003-10-31

   Last Updated
   2025-06-10

   Available Formats
   [IMG]
   XML [IMG]
   HTML [IMG]
   Plain text

   Registry Included Below

     • Digest Algorithms

Digest Algorithms

   Registration Procedure(s)

 Standards Action or Specification Required

   Expert(s)

 Unassigned

   Reference
   [RFC3658][RFC4034][RFC4035][RFC9157][RFC-ietf-dnsop-rfc8624-bis-13]

   Note

 Adding a new entry to the "Digest Algorithms" registry with a
 recommended value of "MAY" in the "Use for DNSSEC Delegation",
 "Use for DNSSEC Validation", "Implement for DNSSEC Delegation",
 or "Implement for DNSSEC Validation" columns SHALL follow the
 "Specification Required" policy as defined in [RFC8126].

 Adding a new entry to, or changing existing values in, the
 "Digest Algorithms" registry for the "Use for DNSSEC Delegation",
 "Use for DNSSEC Validation", "Implement for DNSSEC Delegation",
 or "Implement for DNSSEC Validation" columns to any other value
 than "MAY" requires a Standards Action.

 If an item is not marked as "RECOMMENDED", it does not
 necessarily mean that it is flawed; rather, it indicates
 that the item either has not been through the IETF consensus
 process, has limited applicability, or is intended only for
 specific use cases.


   Available Formats
   [IMG]
   CSV

                           Use for DNSSEC Use for DNSSEC Implement for Implement for
    Value    Description     Delegation     Validation      DNSSEC        DNSSEC                               Reference
                                                          Delegation    Validation
      0    Reserved           MUST NOT       MUST NOT      MUST NOT      MUST NOT    [RFC3658]
      1    SHA-1              MUST NOT     RECOMMENDED     MUST NOT        MUST      [RFC3658][RFC-ietf-dnsop-must-not-sha1-09]
      2    SHA-256          RECOMMENDED    RECOMMENDED       MUST          MUST      [RFC4509]
                                                                                     [RFC5933][Change the status of GOST Signature Algorithms in
      3    GOST R 34.11-94    MUST NOT       MUST NOT      MUST NOT      MUST NOT    DNSSEC in the IETF stream to
                                                                                     Historic][RFC-ietf-dnsop-must-not-ecc-gost-07]
      4    SHA-384              MAY        RECOMMENDED        MAY       RECOMMENDED  [RFC6605]
      5    GOST R               MAY            MAY            MAY           MAY      [RFC9558]
           34.11-2012
      6    SM3                  MAY            MAY            MAY           MAY      [RFC9563]
    7-127  Unassigned
   128-252 Reserved                                                                  [RFC-ietf-dnsop-rfc8624-bis-13]
   253-254 Reserved for                                                              [RFC-ietf-dnsop-rfc8624-bis-13]
           Private Use
     255   Unassigned

   Licensing Terms