[dns-operations] a maximum of about 16K possible DNSSEC keytags?

Robert Edmonds edmonds at mycre.ws
Tue Dec 1 05:47:04 UTC 2015


Roy Arends wrote:
> to do an equivalent calculation with random numbers I use:
> 
> while true; do jot -r 128 0 65535|awk '{s+=$1} END {print (s +
> int(s/65536))%65535}'>>test;done

What if you add 49425 to 's'?  (I think that's the right key tag
calculation for just the Flags/Protocol/Algorithm octets for an
RSASHA256 KSK.)

-- 
Robert Edmonds



More information about the dns-operations mailing list