knsec3hash(1)

knsec3hash1

Simple utility to compute nsec3 hash

Usage

knsec3hash salt algorithm iterations name

knsec3hash algorithm flags iterations salt name

knsec3hash [-h] [-V]

Overview

This utility generates an NSEC3 hash for a given domain name and parameters of NSEC3 hash.

Parameters

salt

Specifies a binary salt encoded as a hexadecimal string.

algorithm

Specifies a hashing algorithm by number. Currently, the only supported algorithm is SHA-1 (number 1).

iterations

Specifies the number of additional iterations of the hashing algorithm.

name

Specifies the domain name to be hashed.

flags

Specifies NSEC3 flags as an unsigned integer.

Options

-h, --help

Print the program help.

-V, --version

Print the program version. The option -VV makes the program print the compile time configuration summary.

Exit status

Exit status of 0 means successful operation. Any other exit status indicates an error.

Examples

$ knsec3hash 1 0 10 c01dcafe knot-dns.cz
7PTVGE7QV67EM61ROS9238P5RAKR2DM7 (salt=c01dcafe, hash=1, iterations=10)
$ knsec3hash - 1 0 net
A1RT98BS5QGC9NFI51S9HCI47ULJG6JH (salt=-, hash=1, iterations=0)

Releases

7 releases since Debian 8 (Jessie); the text changed 6 times.

  1. 8
  2. 9
  3. 10
  4. 11
  5. 12
  6. 13
  7. Arch

--help since Debian 13 (Trixie); --version since Debian 13 (Trixie); -V since Debian 13 (Trixie); -h since Debian 13 (Trixie).

Author

CZ.NIC, z.s.p.o. and contributors <https://www.knot-dns.cz/>

From knot 3.6.0-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.