.. module:: dns.dnssec
.. _dnssec:

DNSSEC
======

Dnspython can do simple DNSSEC signature validation and signing.  In order to use DNSSEC functions, you must have
``python cryptography`` installed.

DNSSEC Functions
----------------

.. autofunction:: dns.dnssec.algorithm_from_text
.. autofunction:: dns.dnssec.algorithm_to_text
.. autofunction:: dns.dnssec.key_id
.. autofunction:: dns.dnssec.make_ds
.. autofunction:: dns.dnssec.make_cds
.. autofunction:: dns.dnssec.make_dnskey
.. autofunction:: dns.dnssec.make_cdnskey()
.. autofunction:: dns.dnssec.sign
.. autofunction:: dns.dnssec.validate
.. autofunction:: dns.dnssec.validate_rrsig
.. autofunction:: dns.dnssec.nsec3_hash
.. autofunction:: dns.dnssec.make_ds_rdataset()
.. autofunction:: dns.dnssec.cds_rdataset_to_ds_rdataset()
.. autofunction:: dns.dnssec.dnskey_rdataset_to_cds_rdataset()
.. autofunction:: dns.dnssec.dnskey_rdataset_to_cdnskey_rdataset()
.. autofunction:: dns.dnssec.default_rrset_signer()
.. autofunction:: dns.dnssec.sign_zone()

DNSSEC Policy
-------------

.. autoclass:: dns.dnssec.Policy
   :members:

DNSSEC Algorithm Types
----------------------

.. autoclass:: dns.dnssectypes.Algorithm
   :members:

.. autoclass:: dns.dnssectypes.DSDigest
   :members:

DNSSEC Algorithm Implementations
---------------------------------

.. autoclass:: dns.dnssecalgs.base.GenericPublicKey
   :members:

.. autoclass:: dns.dnssecalgs.base.GenericPrivateKey
   :members:

DNSSEC Algorithm Constants
---------------------------

.. autodata:: dns.dnssec.RSAMD5
.. autodata:: dns.dnssec.DH
.. autodata:: dns.dnssec.DSA
.. autodata:: dns.dnssec.ECC
.. autodata:: dns.dnssec.RSASHA1
.. autodata:: dns.dnssec.DSANSEC3SHA1
.. autodata:: dns.dnssec.RSASHA1NSEC3SHA1
.. autodata:: dns.dnssec.RSASHA256
.. autodata:: dns.dnssec.RSASHA512
.. autodata:: dns.dnssec.ECDSAP256SHA256
.. autodata:: dns.dnssec.ECDSAP384SHA384
.. autodata:: dns.dnssec.INDIRECT
.. autodata:: dns.dnssec.PRIVATEDNS
.. autodata:: dns.dnssec.PRIVATEOID