--- /dev/null
+.. module:: dns.dnssec
+.. _dnssec:
+
+DNSSEC
+======
+
+Dnspython can do simple DNSSEC signature validation, but
+currently has no facilities for signing. In order to
+use DNSSEC functions, you must have ``pycrypto`` installed.
+If you want to do elliptic curves, you must also have
+``ecdsa`` installed.
+
+DNSSEC Algorithms
+-----------------
+
+.. autodata:: dns.dnssec.RSAMD5
+.. autodata:: dns.dnssec.DH
+.. autodata:: dns.dnssec.DSA
+.. autodata:: dns.dnssec.ECC
+.. autodata:: dns.dnssec.RSASHA1
+.. autodata:: dns.dnssec.DSANSEC3SHA1
+.. autodata:: dns.dnssec.RSASHA1NSEC3SHA1
+.. autodata:: dns.dnssec.RSASHA256
+.. autodata:: dns.dnssec.RSASHA512
+.. autodata:: dns.dnssec.ECDSAP256SHA256
+.. autodata:: dns.dnssec.ECDSAP384SHA384
+.. autodata:: dns.dnssec.INDIRECT
+.. autodata:: dns.dnssec.PRIVATEDNS
+.. autodata:: dns.dnssec.PRIVATEOID
+
+DNSSEC Functions
+----------------
+
+.. autofunction:: dns.dnssec.algorithm_from_text
+.. autofunction:: dns.dnssec.algorithm_to_text
+.. autofunction:: dns.dnssec.key_id
+.. autofunction:: dns.dnssec.make_ds
+.. autofunction:: dns.dnssec.validate
+.. autofunction:: dns.dnssec.validate_rrsig