diff options
author | Rob Austein <sra@hactrn.net> | 2021-02-14 16:01:15 +0000 |
---|---|---|
committer | Rob Austein <sra@hactrn.net> | 2021-02-14 16:01:15 +0000 |
commit | e18e5b3d2559f5f0395ffe79416cdca3abc89310 (patch) | |
tree | 340bdc43c4bfa7bcc3c048eea4db848cabe470de /markdown/DNSSEC%2FRequirements.md | |
parent | ad1cc0517983e599897929b4c94463bf2af78f7c (diff) |
Start restructuring for Pelican
Diffstat (limited to 'markdown/DNSSEC%2FRequirements.md')
-rw-r--r-- | markdown/DNSSEC%2FRequirements.md | 99 |
1 files changed, 0 insertions, 99 deletions
diff --git a/markdown/DNSSEC%2FRequirements.md b/markdown/DNSSEC%2FRequirements.md deleted file mode 100644 index 36b1152..0000000 --- a/markdown/DNSSEC%2FRequirements.md +++ /dev/null @@ -1,99 +0,0 @@ -# DNSSEC Requirements - -## Questions - - -- Should we even support SHA-1? -- GOST? - - -## Must implement - -Target DNSSEC Algorithms: - - -- RSA/SHA-256 (RFC 5702) -- RSA/SHA-512 (RFC 5702) - - -Algorithms: - - -- Hash: SHA-256 -- Hash: SHA-512 -- Sign: RSA - - -Required PKCS11 Mechs: - - -- CKM_RSA_PKCS_KEY_PAIR_GEN -- CKM_SHA256_RSA_PKCS -- CKM_SHA512_RSA_PKCS -- CKM_RSA_PKCS (possible cross-check hash with CKM_SHA256 and CKM_SHA512 before signing) -- CKM_SHA256 -- CKM_SHA512 - - -## Should implement - -Target DNSSEC Algorithms: - - -- ECDSA/P-256/SHA-256 (RFC 6605) -- ECDSA/P-384/SHA-384 (RFC 6605) - - -Algorithms: - - -- Hash: SHA-256 -- Hash: SHA-384 -- Sign: P-256 -- Sign: P-384 - - -Required PKCS11 Mechs: - - -- CKM_EC_KEY_PAIR_GEN -- CKM_ECDSA_SHA256 -- CKM_ECDSA_SHA384 -- CKM_ECDSA (possible cross-check hash with CKM_SHA256 and CKM_SHA512 before signing) -- CKM_SHA256 -- CKM_SHA384 - - -## May implement - -Target DNSSEC Algorithms: - - -- RSA/SHA-1 (RFC 3110) -- GOST (RFC 5933) - - -Algorithms: - - -- Hash: SHA-1 -- Sign: RSA - - - -- Hash: GOST R 34.11-94 (RFC5831) -- Sign: GOST R 34.10-2001 (RFC5832) - - -Required PKCS11 Mechs: - - -- CKM_RSA_PKCS_KEY_PAIR_GEN -- CKM_RSA_PKCS (possible cross-check hash with CKM_SHA_1) -- CKM_SHA1_RSA_PKCS -- CKM_SHA_1 - - - -- CKM_GOSTR3410_KEY_PAIR_GEN -- CKM_GOSTR3410_WITH_GOSTR3411 |