Skip to main content

DKIM Hash Algorithm Adaptivity
draft-nurpmeso-dkim-hash-adaptivity-02

Document Type Expired Internet-Draft (individual)
Expired & archived
Author Steffen Nurpmeso
Last updated 2025-08-06 (Latest revision 2025-02-02)
RFC stream (None)
Intended RFC status (None)
Formats
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

DKIM (RFC 6376, section 3.7) defines how "data-hash" is generated as input to a "sig-alg" for the purpose of generating a cryptographic signature. Different to the RSA algorithm (RFC 8017) solely defined for and by DKIM at the time of its creation, modern signature algorithms, for example EdDSA (RFC 8032), include extensive data hashing as part of the signing process. For these algorithms it may make sense not to create a "data-hash", but to use the entire data as input to "sig-alg". This specification allows DKIM signing algorithms "data-hash" adaptivity, taking advantage of algorithm design, and digital signature API reality.

Authors

Steffen Nurpmeso

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)