google says to me:
If you use custom name servers, you must work with your third-party DNS provider to add a signature to your domain's DNS zone. For each DNSKEY record, you can obtain the following values from your DNS provider:
Key tag: A numeric value that indicates the current DNSKEY record.
Algorithm: The encryption algorithm that creates the security key in the DNSKEY record. It is usually combined with a hash function, such as RSA/SHA1.
Summary type: The algorithm is used to create a summary of a DNSKEY record. It is also called a "summary algorithm", "summary hash", or "summary hash function".
Summary: A hash value of a DNSKEY record that uniquely identifies it without displaying the key value. Depending on the type of summary, the length can be one of the following:
SHA1: 40 hexadecimal digits
SHA256: 64 hexadecimal digits
SHA384: 96 hexadecimal digits