Browse Prior Art Database

Use of the SHA-256 Algorithm with RSA, Digital Signature Algorithm (DSA), and Elliptic Curve DSA (ECDSA) in SSHFP Resource Records (RFC6594)

IP.com Disclosure Number: IPCOM000216450D
Publication Date: 2012-Apr-08
Document File: 18 page(s) / 18K

Publishing Venue

The IP.com Prior Art Database

Related People

O. Sury: AUTHOR

Abstract

The Domain Name System (DNS) is the global, hierarchical distributed database for Internet naming. The Secure Shell (SSH) is a protocol for secure remote login and other secure network services over an insecure network. RFC 4253 [RFC4253] defines Public Key Algorithms for the Secure Shell server public keys.

This text was extracted from an ASCII text file.
This is the abbreviated version, containing approximately 15% of the total text.

Internet Engineering Task Force (IETF)                           O. Sury Request for Comments: 6594                                        CZ.NIC Category: Standards Track                                     April 2012 ISSN: 2070-1721

                  Use of the SHA-256 Algorithm with RSA,                    Digital Signature Algorithm (DSA),         and Elliptic Curve DSA (ECDSA) in SSHFP Resource Records

Abstract

   This document updates the IANA registries in RFC 4255, which defines    SSHFP, a DNS Resource Record (RR) that contains a standard Secure    Shell (SSH) key fingerprint used to verify SSH host keys using DNS    Security Extensions (DNSSEC).  This document defines additional    options supporting SSH public keys applying the Elliptic Curve    Digital Signature Algorithm (ECDSA) and the implementation of    fingerprints computed using the SHA-256 message digest algorithm in    SSHFP Resource Records.

Status of This Memo

   This is an Internet Standards Track document.

   This document is a product of the Internet Engineering Task Force    (IETF).  It represents the consensus of the IETF community.  It has    received public review and has been approved for publication by the    fInternet Engineering Steering Group (IESG).  Further information on    Internet Standards is available in Section 2 of RFC 5741.

   Information about the current status of this document, any errata,    and how to provide feedback on it may be obtained at    http://www.rfc-editor.org/info/rfc6594.

Copyright Notice

   Copyright (c) 2012 IETF Trust and the persons identified as the    document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal    Provisions Relating to IETF Documents    (http://trustee.ietf.org/license-info) in effect on the date of    publication of this document.  Please review these documents    carefully, as they describe your rights and restrictions with respect    to this document.  Code Components extracted from this document must

Sury                         Standards Track                    [Page 1]
 RFC 6594         ECDSA and SHA-256 Algorithms for SSHFP       April 2012

    include Simplified BSD License text as described in Section 4.e of    the Trust Legal Provisions and are provided without warranty as    described in the Simplified BSD License.

Table of Contents

   1. Introduction ....................................................3

   2. Requirements Language ...........................................4

   3. SSHFP Resource Records ..........................................4

      3.1. SSHFP Fingerprint Type Specification .......................4

           3.1.1. SHA-256 SSHF...