[dnssec-deployment] DNSSEC in Russia

bmanning at vacation.karoshi.com bmanning at vacation.karoshi.com
Wed Apr 1 14:45:05 EDT 2009


On Wed, Apr 01, 2009 at 02:22:16PM -0400, Edward Lewis wrote:
> At 11:17 -0700 4/1/09, Paul Hoffman wrote:
> 
> >I am interested in the crypto issues they mentioned. If not RSA, what did
> >they want?
> 
> GOST (I believe, I wasn't there but I have this...)
> 
> "  The term "GOST" is not officially defined, but is usually used to
>    refer to the collection of the Russian cryptographic algorithms
>    GOST R 34.10-2001, GOST R 34.11-94, GOST 28147-89. Since GOST 28147-89
>    is not used in DNSSEC, GOST will only refer to GOST R 34.10-2001
>    (signature algorithm) and GOST R 34.11-94 (hash algorithm) in this
>    document.
> "
> 
> From something passed to me to review.
> -- 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Edward Lewis
> NeuStar                    You can leave a voice message at +1-571-434-5468


	I can confirm tis wa the option presented to me in MEX when we talked
	to the Russian contingent.  I was contemplating doignt he IETF RFC route
	to get GOST added as a defined algorithm for DNSSEC... might still need
	to take that route.

--bill



More information about the Dnssec-deployment mailing list