knsec3hash – NSEC hash computation utility

Synopsis

knsec3hash salt algorithm iterations name

Description

The utility generates NSEC3 hash for given domain name and parameters of NSEC3 hash.

Parameters

salt
Specifies binary salt encoded as a hexadecimal string.
algorithm
Specifies hashing algorithm number. Currently the only supported algorithm is SHA-1 (number 1).
iterations
Specifies the number of additional iterations of the hashing algorithm.
name
Specifies the domain name to be hashed.

Examples

$ knsec3hash c01dcafe 1 10 knot-dns.cz
7PTVGE7QV67EM61ROS9238P5RAKR2DM7 (salt=c01dcafe, hash=1, iterations=10)
$ knsec3hash - 1 0 net
A1RT98BS5QGC9NFI51S9HCI47ULJG6JH (salt=-, hash=1, iterations=0)

See Also

RFC 5155 - DNS Security (DNSSEC) Hashed Authenticated Denial of Existence.

knotc(8), knotd(8).

Table Of Contents

Previous topic

knotd – Knot DNS server daemon

Next topic

knsupdate – Dynamic DNS update utility

This Page