From 23bb68fe7e9cc8af176ff60b56e8a51a70f05a89 Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Sun, 14 Feb 2021 01:35:10 +0000 Subject: Now generating pages directly from sqlite3 --- raw-wiki-dump/DNSSEC%2FRequirements.md | 99 ---------------------------------- 1 file changed, 99 deletions(-) delete mode 100644 raw-wiki-dump/DNSSEC%2FRequirements.md (limited to 'raw-wiki-dump/DNSSEC%2FRequirements.md') diff --git a/raw-wiki-dump/DNSSEC%2FRequirements.md b/raw-wiki-dump/DNSSEC%2FRequirements.md deleted file mode 100644 index 36b1152..0000000 --- a/raw-wiki-dump/DNSSEC%2FRequirements.md +++ /dev/null @@ -1,99 +0,0 @@ -# DNSSEC Requirements - -## Questions - - -- Should we even support SHA-1? -- GOST? - - -## Must implement - -Target DNSSEC Algorithms: - - -- RSA/SHA-256 (RFC 5702) -- RSA/SHA-512 (RFC 5702) - - -Algorithms: - - -- Hash: SHA-256 -- Hash: SHA-512 -- Sign: RSA - - -Required PKCS11 Mechs: - - -- CKM_RSA_PKCS_KEY_PAIR_GEN -- CKM_SHA256_RSA_PKCS -- CKM_SHA512_RSA_PKCS -- CKM_RSA_PKCS (possible cross-check hash with CKM_SHA256 and CKM_SHA512 before signing) -- CKM_SHA256 -- CKM_SHA512 - - -## Should implement - -Target DNSSEC Algorithms: - - -- ECDSA/P-256/SHA-256 (RFC 6605) -- ECDSA/P-384/SHA-384 (RFC 6605) - - -Algorithms: - - -- Hash: SHA-256 -- Hash: SHA-384 -- Sign: P-256 -- Sign: P-384 - - -Required PKCS11 Mechs: - - -- CKM_EC_KEY_PAIR_GEN -- CKM_ECDSA_SHA256 -- CKM_ECDSA_SHA384 -- CKM_ECDSA (possible cross-check hash with CKM_SHA256 and CKM_SHA512 before signing) -- CKM_SHA256 -- CKM_SHA384 - - -## May implement - -Target DNSSEC Algorithms: - - -- RSA/SHA-1 (RFC 3110) -- GOST (RFC 5933) - - -Algorithms: - - -- Hash: SHA-1 -- Sign: RSA - - - -- Hash: GOST R 34.11-94 (RFC5831) -- Sign: GOST R 34.10-2001 (RFC5832) - - -Required PKCS11 Mechs: - - -- CKM_RSA_PKCS_KEY_PAIR_GEN -- CKM_RSA_PKCS (possible cross-check hash with CKM_SHA_1) -- CKM_SHA1_RSA_PKCS -- CKM_SHA_1 - - - -- CKM_GOSTR3410_KEY_PAIR_GEN -- CKM_GOSTR3410_WITH_GOSTR3411 -- cgit v1.2.3