All Questions
3 questions
4
votes
1
answer
1k
views
What is a secure DNSKEY bit length and usage time?
During penetration testing I have seen DNSSEC keys with lengths of 1024 and 512 bits. NIST recommends a key length of at least 2048 bits. So is it correct to assume that these DNSKEY's are unsafe to ...
- 516
1
vote
2
answers
318
views
What are the implications of using an "unsafe" DNSSEC algorithm like RSA/MD5?
Why is it unsafe to use the DNSSEC algorithm RSA/MD5? In practical terms, how is DNSSEC weakened by the use of an algorithm such as MD5, which has a known weakness of collisions?
RFC 6944 states, ...
- 7,075
15
votes
2
answers
4k
views
DNSSEC signing algorithms
Virtualmin supports a flurry of algorithms for DNSSEC: RSASHA1, RSASHA256, RSAMD5, DSA, DH, HMAC-MD5(???), NSEC3RSASHA1, NSEC3DSA.
If I understand correctly, there's Proof of Concept available for ...
- 257