TSIG algorithm
Signing algorithm for this TSIG key, such as hmac-sha256. The algorithm must match the DNS server's key definition.

Choose a modern algorithm supported by both Kea and the DNS server. Avoid changing this without also updating the DNS server.