[Dcrup] Hashed Key Records

[Scott Kitterman <[e-mail]>]

It seemed like the hashed RSA variant ought to be easy enough to implement, so 
I decided to give it a go.  I almost immediately ran into a question.  For 
terminology, I'm using what openssl says [1]

I am assuming that "SHA-256 hash of the public key, stored in base64" means 
use the output of the digest in binary form (--binary) option and encode it in 
base 64.  Is that correct?


So if my signing key were (I know, but just to make sure I understand the 
tranformations):

'Hello World'

Then the the p tag in DNS would be:

p=pZGm1Av0IEBKARczz7exkNYsZb8LzaMrV7J32a2fFG4=

Am I understanding it correctly?

A python one liner:

>>> base64.b64encode(hashlib.sha256(b'Hello World').digest())
'pZGm1Av0IEBKARczz7exkNYsZb8LzaMrV7J32a2fFG4='

Scott K



[1] https://www.openssl.org/docs/man1.1.0/apps/sha256.html