Check .lt domain

.lt Domain Switched to the Elliptic Curve Algorithm (ECDSA) for DNSSEC Security Extension

The Internet Service Centre DOMREG at Kaunas University of Technology has transitioned from the RSA cryptosystem to the Elliptic Curve Digital Signature Algorithm (ECDSA) for DNSSEC (Domain Name System Security Extension).

This change, expected to enhance .lt domain security and efficiency, involves switching from traditional RSA to ECDSA P-256 with SHA-256. ECDSA offers robust security with significantly smaller key sizes, enabling reduced size of DNS responses. Generation and verification processes of signatures are more efficient, thereby improving DNS servers performance.

DNSSEC in the .lt domain was implemented in 2013, and since 2019, the number of DNSSEC signed domains has experienced steady growth. Further details on DNSSEC usage and statistics can be found at: https://www.domreg.lt/en/information/lt-domain-statistics/

Usage of cryptographic algorithms for DNSSEC in Europe and in the World.



Published 2025-02-10