upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-11 02:49:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

new draft

Browse source
This commit is contained in:
Mark Andrews 2009-11-22 22:36:03 +00:00
parent 8b4aab25fa
commit 40ff4bb482
1 changed files with 12 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
doc/draft/draft-ietf-dnsext-dnssec-gost-03.txt → doc/draft/draft-ietf-dnsext-dnssec-gost-04.txt
View file

@ -1,12 +1,12 @@
DNS Extensions working group V.Dolmatov, Ed.
Internet-Draft Cryptocom Ltd.
Intended status: Standards Track November 10, 2009
Expires: May 10, 2010
Intended status: Standards Track November 22, 2009
Expires: May 22, 2010
Use of GOST signature algorithms in DNSKEY and RRSIG Resource Records
for DNSSEC
draft-ietf-dnsext-dnssec-gost-03
draft-ietf-dnsext-dnssec-gost-04
Status of this Memo
@ -49,7 +49,7 @@ Abstract
the Domain Name System Security Extensions (DNSSEC, RFC 4033,
RFC 4034, and RFC 4035).
V.Dolmatov Expires May 10, 2010 [Page 1]
V.Dolmatov Expires May 22, 2010 [Page 1]
Table of Contents
@ -106,7 +106,7 @@ Table of Contents
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
document are to be interpreted as described in [RFC2119].
V.Dolmatov Expires May 10, 2010 [Page 2]
V.Dolmatov Expires May 22, 2010 [Page 2]
2. DNSKEY Resource Records
@ -164,7 +164,7 @@ V.Dolmatov Expires May 10, 2010 [Page 2]
GostAsn1: MEUCAQAwHAYGKoUDAgITMBIGByqFAwICIwEGByqFAwICHgEEIgQgV/S
2FXdMtzKJBehZvjF4lVSx6m66TwqSe/MFwKSH/3E=
V.Dolmatov Expires May 10, 2010 [Page 3]
V.Dolmatov Expires May 22, 2010 [Page 3]
The following DNSKEY RR stores a DNS zone key for example.net
@ -229,7 +229,7 @@ V.Dolmatov Expires May 10, 2010 [Page 3]
type {TBA2}. The wire format of a digest value is compatible with
RFC 4490 [RFC4490], that is digest is in little-endian representation.
V.Dolmatov Expires May 10, 2010 [Page 4]
V.Dolmatov Expires May 22, 2010 [Page 4]
The digest MUST always be calculated with GOST R 34.11-94 parameters
identified by id-GostR3411-94-CryptoProParamSet [RFC4357].
@ -296,9 +296,9 @@ V.Dolmatov Expires May 10, 2010 [Page 4]
Currently, the cryptographic resistance of the GOST 34.10-2001
digital signature algorithm is estimated as 2**128 operations
of multiple elliptic curve point computations on prime modulus
2**256.
of order 2**256.
V.Dolmatov Expires May 10, 2010 [Page 5]
V.Dolmatov Expires May 22, 2010 [Page 5]
Currently, the cryptographic resistance of GOST 34.11-94 hash
algorithm is estimated as 2**128 operations of computations of a
@ -355,7 +355,7 @@ V.Dolmatov Expires May 10, 2010 [Page 5]
Rose, "Resource Records for the DNS Security Extensions",
RFC 4034, March 2005.
V.Dolmatov Expires May 10, 2010 [Page 6]
V.Dolmatov Expires May 22, 2010 [Page 6]
[RFC4035] Arends R., Austein R., Larson M., Massey D., and S.
Rose, "Protocol Modifications for the DNS Security
@ -448,7 +448,8 @@ Moscow, 117303, Russian Federation
EMail: igus@cryptocom.ru
V.Dolmatov Expires May 10, 2010 [Page 8]
V.Dolmatov Expires May 22, 2010 [Page 8]