1KNSEC3HASH(1) Knot DNS KNSEC3HASH(1)
2
3
4
6 knsec3hash - Simple utility to compute NSEC3 hash
7
9 knsec3hash salt algorithm iterations name
10
12 This utility generates a NSEC3 hash for a given domain name and parame‐
13 ters of NSEC3 hash.
14
15 Parameters
16 salt Specifies a binary salt encoded as a hexadecimal string.
17
18 algorithm
19 Specifies a hashing algorithm by number. Currently, the only
20 supported algorithm is SHA-1 (number 1).
21
22 iterations
23 Specifies the number of additional iterations of the hashing
24 algorithm.
25
26 name Specifies the domain name to be hashed.
27
29 Exit status of 0 means successful operation. Any other exit status
30 indicates an error.
31
33 $ knsec3hash c01dcafe 1 10 knot-dns.cz
34 7PTVGE7QV67EM61ROS9238P5RAKR2DM7 (salt=c01dcafe, hash=1, iterations=10)
35
36 $ knsec3hash - 1 0 net
37 A1RT98BS5QGC9NFI51S9HCI47ULJG6JH (salt=-, hash=1, iterations=0)
38
40 RFC 5155 – DNS Security (DNSSEC) Hashed Authenticated Denial of Exis‐
41 tence.
42
43 knotc(8), knotd(8).
44
46 CZ.NIC Labs <https://www.knot-dns.cz>
47
49 Copyright 2010–2021, CZ.NIC, z.s.p.o.
50
51
52
53
543.0.5 2021-03-25 KNSEC3HASH(1)