DNSSEC: Does the algorithm of the ZSK need to match the algorithm of the KSK?

Is it legal with DNSSEC to have differing algorithms for the ZSK and KSK? If so, how can I sign verify the zone using the standard bind DNSSEC tools with such a configuration?

...

 Well, as much as the tools complain about it, it does appear to work: dig voria.net +dnssec +multi isn't giving me any errors.

http://security.stackexchange.com/questions/80493/dnssec-does-the-algorithm-of-the-zsk-need-to-match-the-algorithm-of-the-ksk 


 

kernel, ok, microvolts code here so you don't need clusters you need a microvolt regulator

https://kernel.googlesource.com/pub/scm/linux/kernel/git/broonie/regulator/+/regulator-v4.0-rc2%5E3..regulator-v4.0-rc2/