Manpage logo

knsec3hash - Simple utility to compute NSEC3 hash

NAME  SYNOPSIS  DESCRIPTION  Parameters  Options  EXIT VALUES  EXAMPLES  SEE ALSO  AUTHOR  COPYRIGHT 

NAME

knsec3hash − Simple utility to compute NSEC3 hash

SYNOPSIS

knsec3hash salt algorithm iterations name

knsec3hash algorithm flags iterations salt name

knsec3hash [−h] [−V]

DESCRIPTION

This utility generates an NSEC3 hash for a given domain name and parameters of NSEC3 hash.

Parameters

salt

Specifies a binary salt encoded as a hexadecimal string.

algorithm

Specifies a hashing algorithm by number. Currently, the only supported algorithm is SHA−1 (number 1).

iterations

Specifies the number of additional iterations of the hashing algorithm.

name

Specifies the domain name to be hashed.

flags

Specifies NSEC3 flags as an unsigned integer.

Options

−h, −−help

Print the program help.

−V, −−version

Print the program version. The option −VV makes the program print the compile time configuration summary.

EXIT VALUES

Exit status of 0 means successful operation. Any other exit status indicates an error.

EXAMPLES

$ knsec3hash 1 0 10 c01dcafe knot−dns.cz
7PTVGE7QV67EM61ROS9238P5RAKR2DM7 (salt=c01dcafe, hash=1, iterations=10)

$ knsec3hash − 1 0 net
A1RT98BS5QGC9NFI51S9HCI47ULJG6JH (salt=−, hash=1, iterations=0)

SEE ALSO

RFC 5155 â DNS Security (DNSSEC) Hashed Authenticated Denial of Existence.

knotc(8), knotd(8).

AUTHOR

CZ.NIC, z.s.p.o. and contributors <https://www.knot-dns.cz/>

COPYRIGHT

Copyright (C) CZ.NIC, z.s.p.o. and contributors


Updated 2026-06-01 - jenkler.se | uex.se