June 2018
Intermediate to advanced
368 pages
11h 1m
English
When you generate your ZSK or your KSK, you end up with DNSKEY RRs.
The DNSKEY RR type contains the public half of the key used for signing and the associated metadata.
The format is:
<OWNER NAME> <TTL> IN DNSKEY <FLAGS> <PROTOCOL> <ALGORITHM> <PUBLIC KEY>
The wire format is this:
1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 2 3 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| flags |S| protocol | algorithm |
| |E| | |
| |P| | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| /
/ public key /
/ /
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Source: http://www.ietf.org/rfc/rfc3757.txt
Bit 15 of the flags section is ...
Read now
Unlock full access