<para>
In PowerDNS, TSIG shared secrets are stored by the various backends. In case of the popular
Generic backends, they can be found in the 'tsigkeys' table. The name can be chosen freely, but
- the algorithm name will typically be 'hmac-md5'. The content is a Base64-encoded secret.
+ the algorithm name will typically be 'hmac-md5'. Other supported algorithms are 'hmac-sha1', 'hmac-shaX' where X is 224, 256, 384 or 512. The content is a Base64-encoded secret.
</para>
<para>
<note><para>Most backends require DNSSEC support enabled to support TSIG. For the Generic SQL Backend make sure to use the DNSSEC enabled schema and to turn on the relevant '-dnssec' flag (for example, gmysql-dnssec)!</para></note>