Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
E738665
"Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC" (RFC 5702) is an IETF standards-track document that specifies how to employ SHA-2 hash algorithms with RSA signatures in DNSSEC to enhance the security of DNS authentication.
All labels observed (2)
| Label | Occurrences |
|---|---|
| Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC canonical | 2 |
| Use of SHA-2 Algorithms with RSA in DNSSEC | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T8513121 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC Context triple: [RFC 5702, title, Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC]
-
A.
Protocol Modifications for the DNS Security Extensions
"Protocol Modifications for the DNS Security Extensions" is an IETF standards-track document (RFC 4035) that specifies how DNSSEC is operationally implemented and processed by DNS resolvers and authoritative servers.
-
B.
DSA (Digital Signature Algorithm)
DSA (Digital Signature Algorithm) is a widely used public-key cryptographic standard for creating and verifying digital signatures, originally based on principles similar to those of the ElGamal signature scheme.
-
C.
DNSSEC root key signing ceremony
The DNSSEC root key signing ceremony is a highly controlled, regularly scheduled cryptographic event where trusted personnel generate and manage the root cryptographic keys that secure the global Domain Name System.
-
D.
DNSSEC
DNSSEC (Domain Name System Security Extensions) is a suite of specifications that adds cryptographic authentication and integrity protection to DNS data to prevent attacks such as cache poisoning and spoofing.
-
E.
SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol
"SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol" is an IETF specification that updates SSH to use SHA-2-based message authentication codes to improve data integrity and security over the transport layer.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC Target entity description: "Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC" (RFC 5702) is an IETF standards-track document that specifies how to employ SHA-2 hash algorithms with RSA signatures in DNSSEC to enhance the security of DNS authentication.
-
A.
Protocol Modifications for the DNS Security Extensions
"Protocol Modifications for the DNS Security Extensions" is an IETF standards-track document (RFC 4035) that specifies how DNSSEC is operationally implemented and processed by DNS resolvers and authoritative servers.
-
B.
DSA (Digital Signature Algorithm)
DSA (Digital Signature Algorithm) is a widely used public-key cryptographic standard for creating and verifying digital signatures, originally based on principles similar to those of the ElGamal signature scheme.
-
C.
DNSSEC root key signing ceremony
The DNSSEC root key signing ceremony is a highly controlled, regularly scheduled cryptographic event where trusted personnel generate and manage the root cryptographic keys that secure the global Domain Name System.
-
D.
DNSSEC
DNSSEC (Domain Name System Security Extensions) is a suite of specifications that adds cryptographic authentication and integrity protection to DNS data to prevent attacks such as cache poisoning and spoofing.
-
E.
SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol
"SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol" is an IETF specification that updates SSH to use SHA-2-based message authentication codes to improve data integrity and security over the transport layer.
- F. None of above. chosen
Statements (42)
| Predicate | Object |
|---|---|
| instanceOf |
IETF standards-track document
ⓘ
Request for Comments ⓘ |
| addresses | use of stronger hash functions than SHA-1 in DNSSEC ⓘ |
| aimsTo | improve robustness of DNSSEC signatures ⓘ |
| appliesTo |
DNSKEY resource records
ⓘ
RRSIG resource records ⓘ |
| area | Security ⓘ |
| category | Standards Track ⓘ |
| contributesTo | overall security of the DNS infrastructure ⓘ |
| defines | new DNSSEC algorithm identifiers for RSA with SHA-2 ⓘ |
| definesAlgorithmForDNSSEC |
RSA/SHA-256
ⓘ
RSA/SHA-512 ⓘ
linked to:
RSA
|
| definesFieldUsage |
DNSKEY algorithm field for RSA/SHA-2
ⓘ
RRSIG algorithm field for RSA/SHA-2 ⓘ |
| definesUseOf | SHA-2 hash algorithms with RSA in DNSSEC ⓘ |
| hashAlgorithmFamily | SHA-2 ⓘ |
| intendedFor |
DNS operators
ⓘ
protocol implementers ⓘ security practitioners ⓘ |
| motivatedBy | cryptographic weaknesses of SHA-1 ⓘ |
| obsoletesAlgorithmUsage | exclusive reliance on RSA/SHA-1 in DNSSEC ⓘ |
| partOf |
DNSSEC standards corpus
ⓘ
linked to:
DNSSEC
|
| protocol | DNSSEC ⓘ |
| publishedBy | Internet Engineering Task Force ⓘ |
| publishedInSeries |
RFC series
ⓘ
linked to:
RFCs
|
| purpose | to enhance the security of DNS authentication ⓘ |
| relatedTo | DNSSEC algorithm agility ⓘ |
| relevantTo |
DNS authoritative name servers
ⓘ
DNS resolvers ⓘ DNSSEC validators ⓘ |
| shortTitle | Use of SHA-2 Algorithms with RSA in DNSSEC ⓘ |
| signatureAlgorithmFamily | RSA ⓘ |
| specifies |
operational considerations for deploying RSA/SHA-2 in DNSSEC
ⓘ
wire format considerations for RSA/SHA-2 in DNSSEC ⓘ |
| specifiesUseInRecordType |
DNSKEY
ⓘ
RRSIG ⓘ
linked to:
DNSKEY
|
| standardizes |
use of SHA-256 with RSA in DNSSEC
ⓘ
use of SHA-512 with RSA in DNSSEC ⓘ |
| status | Proposed Standard ⓘ |
| stream |
IETF
ⓘ
linked to:
Internet Engineering Task Force
|
| title | Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC ⓘ |
| updatesSpecificationFor | Domain Name System Security Extensions ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC Description of subject: "Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC" (RFC 5702) is an IETF standards-track document that specifies how to employ SHA-2 hash algorithms with RSA signatures in DNSSEC to enhance the security of DNS authentication.
Referenced by (3)
Full triples — surface form annotated when it differs from this entity's canonical label.