1KNSEC3HASH(1) Knot DNS KNSEC3HASH(1)
2
3
4
6 knsec3hash - Simple utility to compute NSEC3 hash
7
9 knsec3hash salt algorithm iterations name
10
11 knsec3hash algorithm flags iterations salt name
12
14 This utility generates a NSEC3 hash for a given domain name and parame‐
15 ters of NSEC3 hash.
16
17 Parameters
18 salt Specifies a binary salt encoded as a hexadecimal string.
19
20 algorithm
21 Specifies a hashing algorithm by number. Currently, the only
22 supported algorithm is SHA-1 (number 1).
23
24 iterations
25 Specifies the number of additional iterations of the hashing al‐
26 gorithm.
27
28 name Specifies the domain name to be hashed.
29
31 Exit status of 0 means successful operation. Any other exit status in‐
32 dicates an error.
33
35 $ knsec3hash 1 0 10 c01dcafe knot-dns.cz
36 7PTVGE7QV67EM61ROS9238P5RAKR2DM7 (salt=c01dcafe, hash=1, iterations=10)
37
38 $ knsec3hash - 1 0 net
39 A1RT98BS5QGC9NFI51S9HCI47ULJG6JH (salt=-, hash=1, iterations=0)
40
42 RFC 5155 – DNS Security (DNSSEC) Hashed Authenticated Denial of Exis‐
43 tence.
44
45 knotc(8), knotd(8).
46
48 CZ.NIC Labs <https://www.knot-dns.cz>
49
51 Copyright 2010–2022, CZ.NIC, z.s.p.o.
52
53
54
55
563.1.8 2022-04-28 KNSEC3HASH(1)