Enum Algorithm

Source

pub enum Algorithm {
Show 21 variants
    Reserved(u8),
    RSAMD5,
    DH,
    DSA,
    ECC,
    RSASHA1,
    INDIRECT,
    PRIVATEDNS,
    PRIVATEOID,
    DSANSEC3SHA1,
    RSASHA1NSEC3SHA1,
    RSASHA256,
    RSASHA512,
    ECCGOST,
    ECDSAP256SHA256,
    ECDSAP384SHA384,
    ED25519,
    ED448,
    SM2SM3,
    ECCGOST12,
    Unassigned(u8),
}

Expand description

RFC 4398, Storing Certificates in DNS, November 1987


[2.2](https://datatracker.ietf.org/doc/html/rfc4398#section-2.2).  Text Representation of CERT RRs

   The RDATA portion of a CERT RR has the type field as an unsigned
   decimal integer or as a mnemonic symbol as listed in [Section 2.1](https://datatracker.ietf.org/doc/html/rfc4398#section-2.1),
   above.

   The key tag field is represented as an unsigned decimal integer.

   The algorithm field is represented as an unsigned decimal integer or
   a mnemonic symbol as listed in [[12](https://datatracker.ietf.org/doc/html/rfc4398#ref-12)].

[12]  Arends, R., Austein, R., Larson, M., Massey, D., and S. Rose,
"Resource Records for the DNS Security Extensions", RFC 4034,
March 2005.


[RFC 4034, Resource Records for the DNS Security Extensions, March 2005][rfc4034]
https://tools.ietf.org/html/rfc4034#appendix-A.1

[A.1](https://datatracker.ietf.org/doc/html/rfc4034#appendix-A.1).  DNSSEC Algorithm Types

   The DNSKEY, RRSIG, and DS RRs use an 8-bit number to identify the
   security algorithm being used.  These values are stored in the
   "Algorithm number" field in the resource record RDATA.

   Some algorithms are usable only for zone signing (DNSSEC), some only
   for transaction security mechanisms (SIG(0) and TSIG), and some for
   both.  Those usable for zone signing may appear in DNSKEY, RRSIG, and
   DS RRs.  Those usable for transaction security would be present in
   SIG(0) and KEY RRs, as described in [RFC2931].

                                Zone
   Value Algorithm [Mnemonic]  Signing  References   Status
   ----- -------------------- --------- ----------  ---------
     0   reserved
     1   RSA/MD5 [RSAMD5]         n      [RFC2537]  NOT RECOMMENDED
     2   Diffie-Hellman [DH]      n      [RFC2539]   -
     3   DSA/SHA-1 [DSA]          y      [RFC2536]  OPTIONAL
     4   Elliptic Curve [ECC]              TBA       -
     5   RSA/SHA-1 [RSASHA1]      y      [RFC3110]  MANDATORY
   252   Indirect [INDIRECT]      n                  -
   253   Private [PRIVATEDNS]     y      see below  OPTIONAL
   254   Private [PRIVATEOID]     y      see below  OPTIONAL
   255   reserved

   6 - 251  Available for assignment by IETF Standards Action.

(RFC Required) Domain Name System Security (DNSSEC) Algorithm Numbers
Created: 2003-11-03, Last Updated: 2024-04-16
https://www.iana.org/assignments/dns-sec-alg-numbers/dns-sec-alg-numbers.txt

                                                             Zone
    Value  Algorithm [Mnemonic]                            Signing    References
    -----  --------------------                           ---------   ----------
      6    DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]                    Y       [RFC5155][proposed standard]
      7    RSASHA1-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]            Y       [RFC5155][proposed standard]
      8    RSA/SHA-256 [RSASHA256]                            Y       [RFC5702][proposed standard]
      9    reserved
     10    RSA/SHA-512 [RSASHA512]                            Y       [RFC5702][proposed standard]
     11    reserved
     12    GOST R 34.10-2001 [ECC-GOST]                       Y       [RFC5933][proposed standard]
     13    ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]   Y       [RFC6605][proposed standard]
     14    ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]   Y       [RFC6605][proposed standard]
     15    Ed25519 [ED25519]                                  Y       [RFC8080][proposed standard]
     16    Ed448 [ED448]                                      Y       [RFC8080][proposed standard]
     17    SM2 signing with SM3 hashing [SM2SM3]              Y       [RFC-cuiling-dnsop-sm2-alg-15][informational]
  18-22    Unassigned
     23    GOST R 34.10-2012 [ECC-GOST12]                     Y       [RFC9558][informational]
 24-122    Unassigned
123-251    reserved