8000 DNSSEC DS validate digest length based on digest type · Issue #250 · dnsjava/dnsjava · GitHub
[go: up one dir, main page]

Skip to content
DNSSEC DS validate digest length based on digest type #250
Closed
@andrew-boutin

Description

@andrew-boutin

https://www.iana.org/assignments/ds-rr-types/ds-rr-types.xhtml has a list of the DNSSEC DS digest types. Each has a link to an RFC where it was introduced that details the expected digest length corresponding to the digest type. The dnsjava library DS record validation could validate the digest length depending on the digest type.

  • 1 SHA-1 20 bytes.
  • 2 SHA-256 32 bytes.
  • 3 GOST R 34.11-94 64 32 bytes.
  • 4 SHA-384 48 bytes.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

    0