1KNSEC3HASH(1)                      Knot DNS                      KNSEC3HASH(1)
2
3
4

NAME

6       knsec3hash - Simple utility to compute NSEC3 hash
7

SYNOPSIS

9       knsec3hash salt algorithm iterations name
10
11       knsec3hash algorithm flags iterations salt name
12

DESCRIPTION

14       This utility generates a NSEC3 hash for a given domain name and parame‐
15       ters of NSEC3 hash.
16
17   Parameters
18       salt   Specifies a binary salt encoded as a hexadecimal string.
19
20       algorithm
21              Specifies a hashing algorithm by  number.  Currently,  the  only
22              supported algorithm is SHA-1 (number 1).
23
24       iterations
25              Specifies the number of additional iterations of the hashing al‐
26              gorithm.
27
28       name   Specifies the domain name to be hashed.
29
30       flags  Specifies NSEC3 flags as an unsigned integer.
31

EXIT VALUES

33       Exit status of 0 means successful operation. Any other exit status  in‐
34       dicates an error.
35

EXAMPLES

37          $ knsec3hash 1 0 10 c01dcafe knot-dns.cz
38          7PTVGE7QV67EM61ROS9238P5RAKR2DM7 (salt=c01dcafe, hash=1, iterations=10)
39
40          $ knsec3hash - 1 0 net
41          A1RT98BS5QGC9NFI51S9HCI47ULJG6JH (salt=-, hash=1, iterations=0)
42

SEE ALSO

44       RFC  5155  – DNS Security (DNSSEC) Hashed Authenticated Denial of Exis‐
45       tence.
46
47       knotc(8), knotd(8).
48

AUTHOR

50       CZ.NIC Labs <https://www.knot-dns.cz>
51

53       Copyright 2010–2023, CZ.NIC, z.s.p.o.
54
55
56
57
583.3.2                             2023-10-20                     KNSEC3HASH(1)
Impressum