1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
|
Internet Engineering Task Force (IETF) A. Bryan
Request for Comments: 5843 April 2010
Category: Informational
ISSN: 2070-1721
Additional Hash Algorithms for HTTP Instance Digests
Abstract
The IANA registry named "Hypertext Transfer Protocol (HTTP) Digest
Algorithm Values" defines values for digest algorithms used by
Instance Digests in HTTP. Instance Digests in HTTP provide a digest,
also known as a checksum or hash, of an entire representation of the
current state of a resource. This document adds new values to the
registry and updates previous values.
Status of This Memo
This document is not an Internet Standards Track specification; it is
published for informational purposes.
This document is a product of the Internet Engineering Task Force
(IETF). It represents the consensus of the IETF community. It has
received public review and has been approved for publication by the
Internet Engineering Steering Group (IESG). Not all documents
approved by the IESG are a candidate for any level of Internet
Standard; see Section 2 of RFC 5741.
Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
http://www.rfc-editor.org/info/rfc5843.
Copyright Notice
Copyright (c) 2010 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Bryan Informational [Page 1]
^L
RFC 5843 More Algorithms for HTTP Instance Digests April 2010
Table of Contents
1. Introduction ....................................................2
1.1. Example ....................................................2
2. IANA Considerations .............................................2
2.1. Previous Registrations Updated .............................2
2.2. New Registrations ..........................................3
3. Security Considerations .........................................3
4. Changes Compared to RFC 3230 ....................................3
5. Normative References ............................................4
Appendix A. Acknowledgements and Contributors ......................5
1. Introduction
The IANA registry named "Hypertext Transfer Protocol (HTTP) Digest
Algorithm Values" defines values for digest algorithms used by
Instance Digests in HTTP.
Note: This is unrelated to HTTP Digest Authentication. Instance
Digests in HTTP provide a digest, also known as a checksum or hash,
of an entire representation of the current state of a resource.
The registry was created by [RFC3230] in 2002. This document adds
new values to the registry and updates previous values that had
redundant or outdated references.
1.1. Example
Example of Instance Digest for SHA-256:
Digest: SHA-256=MWVkMWQxYTRiMzk5MDQ0MzI3NGU5NDEyZTk5OWY1ZGFmNzgyZTJlO
DYzYjRjYzFhOTlmNTQwYzI2M2QwM2U2MQ==
2. IANA Considerations
This document makes use of the IANA registry named "Hypertext
Transfer Protocol (HTTP) Digest Algorithm Values" specified in
[RFC3230].
2.1. Previous Registrations Updated
Accordingly, IANA has updated the following registrations:
Digest Algorithm: MD5
Description: The MD5 algorithm, as specified in [RFC1321]. The
output of this algorithm is encoded using the base64 encoding
[RFC4648].
Bryan Informational [Page 2]
^L
RFC 5843 More Algorithms for HTTP Instance Digests April 2010
Reference: [RFC1321], [RFC4648], this document.
Digest Algorithm: SHA
Description: The SHA-1 algorithm [FIPS-180-3]. The output of this
algorithm is encoded using the base64 encoding [RFC4648].
Reference: [FIPS-180-3], [RFC4648], this document.
2.2. New Registrations
Accordingly, IANA has made the following registrations:
Digest Algorithm: SHA-256
Description: The SHA-256 algorithm [FIPS-180-3]. The output of
this algorithm is encoded using the base64 encoding [RFC4648].
Reference: [FIPS-180-3], [RFC4648], this document.
Digest Algorithm: SHA-512
Description: The SHA-512 algorithm [FIPS-180-3]. The output of
this algorithm is encoded using the base64 encoding [RFC4648].
Reference: [FIPS-180-3], [RFC4648], this document.
3. Security Considerations
Same as [RFC3230].
4. Changes Compared to RFC 3230
The reference for base64 encoding has been updated for both MD5 and
SHA.
The reference for SHA has been updated.
The SHA-256 and SHA-512 algorithms have been added to the registry.
All other previous values to the registry are still valid.
Bryan Informational [Page 3]
^L
RFC 5843 More Algorithms for HTTP Instance Digests April 2010
5. Normative References
[FIPS-180-3] National Institute of Standards and Technology (NIST),
"Secure Hash Standard (SHS)", FIPS PUB 180-3,
October 2008.
[RFC1321] Rivest, R., "The MD5 Message-Digest Algorithm",
RFC 1321, April 1992.
[RFC3230] Mogul, J. and A. Van Hoff, "Instance Digests in HTTP",
RFC 3230, January 2002.
[RFC4648] Josefsson, S., "The Base16, Base32, and Base64 Data
Encodings", RFC 4648, October 2006.
Bryan Informational [Page 4]
^L
RFC 5843 More Algorithms for HTTP Instance Digests April 2010
Appendix A. Acknowledgements and Contributors
Thanks to Mark Nottingham, Eran Hammer-Lahav, Nils Maier, Lisa
Dusseault, Alfred Hoenes, Pasi Eronen, Gonzalo Camarillo, Radia
Perlman, and Jeffrey Mogul.
Author's Address
Anthony Bryan
Pompano Beach, FL
USA
EMail: anthonybryan@gmail.com
URI: http://www.metalinker.org
Bryan Informational [Page 5]
^L
|