[ksk-rollover] Size of new keys?

Tony Finch dot at dotat.at
Wed Sep 19 10:53:07 UTC 2018


Rene 'Renne' Bartsch, B.Sc. Informatics via ksk-rollover <ksk-rollover at ican...:
>
> how many bits will the new keys have?

The new KSK has been published in the root zone for over a year. You can
find out key sizes like this:

$ perl -MNet::DNS -we '
	printf "%s %s %s\n", $_->keytag, $_->flags, $_->keylength
		 for Net::DNS::Resolver->new()->send(".","DNSKEY")->answer'
20326 257 2048
19036 257 2048
41656 256 2048

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
work to the benefit of all


More information about the ksk-rollover mailing list