Domain Name System Security (DNSSEC) Algorithm Numbers 2003-10-31 2026-01-13 Standards Action or Specification Required Mark Andrews, Roy Arends, Warren Kumari, Wes Hardaker Adding a new entry to the "Digest Algorithms" registry with a recommended value of "MAY" in the "Use for DNSSEC Delegation”, "Use for DNSSEC Validation", "Implement for DNSSEC Delegation", or "Implement for DNSSEC Validation" columns SHALL follow the Specification Required policy as defined in . Adding a new entry to, or changing an existing value in, the "Digest Algorithms" registry that has any value other than “MAY" in the "Use for DNSSEC Delegation", "Use for DNSSEC Validation”, "Implement for DNSSEC Delegation", or "Implement for DNSSEC Validation" columns requires Standards Action. If an item is not marked as "RECOMMENDED", it does not necessarily mean that it is flawed; rather, it indicates that the item either has not been through the IETF consensus process, has limited applicability, or is intended only for specific use cases. 0 Reserved MUST NOT MUST NOT MUST NOT MUST NOT 1 SHA-1 MUST NOT RECOMMENDED MUST NOT MUST 2 SHA-256 RECOMMENDED RECOMMENDED MUST MUST 3 GOST R 34.11-94 (DEPRECATED) MUST NOT MUST NOT MUST NOT MUST NOT Change the status of GOST Signature Algorithms in DNSSEC in the IETF stream to Historic 4 SHA-384 MAY RECOMMENDED MAY RECOMMENDED 5 GOST R 34.11-2012 MAY MAY MAY MAY 6 SM3 MAY MAY MAY MAY 7-127 Unassigned 128-252 Reserved 253-254 Reserved for Private Use 255 Unassigned