Domain Name System Security Extensions
Algorithms
DNSSEC was designed to be extensible so that as attacks are discovered against existing algorithms, new ones can be introduced in a backward-compatible fashion.

Domain Name System Security Extensions

Section Title: Algorithms
Table Section Text: DNSSEC was designed to be extensible so that as attacks are discovered against existing algorithms, new ones can be introduced in a backward-compatible fashion.

Algorithm field	Algorithm	Source	Implementation status

1	RSA/MD5	Must Not Implement

3	DSA/SHA-1	Optional

5	RSA/SHA-1	RFC 3110	Required

7	RSASHA1-NSEC3-SHA1	RFC 5155	Recommended

8	RSA/SHA-256	RFC 5702	Recommended

10	RSA/SHA-512	Recommended

12	GOST R 34.10-2001	RFC 5933	Optional

13	ECDSA/SHA-256	RFC 6605	Recommended

14	ECDSA/SHA-384	Recommended

15	Ed25519	RFC 8080	Optional

16	Ed448	Optional

Sentence(s)

In the Domain Name System Security Extensions, the zone 8 uses SHA-256 with the RSA algorithm, as defined in RFC 5702.

final_sentence: In the Domain Name System Security Extensions, the zone 8 uses SHA-256 with the RSA algorithm, as defined in RFC 5702.