1KNSEC3HASH(1)                      Knot DNS                      KNSEC3HASH(1)
2
3
4

NAME

6       knsec3hash - Simple utility to compute NSEC3 hash
7

SYNOPSIS

9       knsec3hash salt algorithm iterations name
10

DESCRIPTION

12       This utility generates a NSEC3 hash for a given domain name and parame‐
13       ters of NSEC3 hash.
14
15   Parameters
16       salt   Specifies a binary salt encoded as a hexadecimal string.
17
18       algorithm
19              Specifies a hashing algorithm by  number.  Currently,  the  only
20              supported algorithm is SHA-1 (number 1).
21
22       iterations
23              Specifies the number of additional iterations of the hashing al‐
24              gorithm.
25
26       name   Specifies the domain name to be hashed.
27

EXIT VALUES

29       Exit status of 0 means successful operation. Any other exit status  in‐
30       dicates an error.
31

EXAMPLES

33          $ knsec3hash c01dcafe 1 10 knot-dns.cz
34          7PTVGE7QV67EM61ROS9238P5RAKR2DM7 (salt=c01dcafe, hash=1, iterations=10)
35
36          $ knsec3hash - 1 0 net
37          A1RT98BS5QGC9NFI51S9HCI47ULJG6JH (salt=-, hash=1, iterations=0)
38

SEE ALSO

40       RFC  5155  – DNS Security (DNSSEC) Hashed Authenticated Denial of Exis‐
41       tence.
42
43       knotc(8), knotd(8).
44

AUTHOR

46       CZ.NIC Labs <https://www.knot-dns.cz>
47

49       Copyright 2010–2021, CZ.NIC, z.s.p.o.
50
51
52
53
543.0.6                             2021-05-12                     KNSEC3HASH(1)
Impressum