2 * Copyright (C) 2006, 2008, 2009, 2011, 2014 Internet Systems Consortium, Inc. ("ISC")
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
8 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
9 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
10 * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
11 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
12 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
13 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
14 * PERFORMANCE OF THIS SOFTWARE.
17 /* $Id: nsec3hash.c,v 1.8 2011/11/02 23:46:24 tbox Exp $ */
24 #include <isc/base32.h>
25 #include <isc/buffer.h>
27 #include <isc/iterated_hash.h>
28 #include <isc/print.h>
29 #include <isc/result.h>
30 #include <isc/string.h>
31 #include <isc/types.h>
33 #include <dns/fixedname.h>
35 #include <dns/nsec3.h>
36 #include <dns/types.h>
38 const char *program = "nsec3hash";
40 ISC_PLATFORM_NORETURN_PRE static void
41 fatal(const char *format, ...) ISC_PLATFORM_NORETURN_POST;
44 fatal(const char *format, ...) {
47 fprintf(stderr, "%s: ", program);
48 va_start(args, format);
49 vfprintf(stderr, format, args);
51 fprintf(stderr, "\n");
56 check_result(isc_result_t result, const char *message) {
57 if (result != ISC_R_SUCCESS)
58 fatal("%s: %s", message, isc_result_totext(result));
63 fprintf(stderr, "Usage: %s salt algorithm iterations domain\n",
69 main(int argc, char **argv) {
70 dns_fixedname_t fixed;
75 unsigned char hash[NSEC3_MAX_HASH_LENGTH];
76 unsigned char salt[DNS_NSEC3_SALTSIZE];
77 unsigned char text[1024];
78 unsigned int hash_alg;
80 unsigned int iterations;
81 unsigned int salt_length;
86 if (strcmp(argv[1], "-") == 0) {
90 isc_buffer_init(&buffer, salt, sizeof(salt));
91 result = isc_hex_decodestring(argv[1], &buffer);
92 check_result(result, "isc_hex_decodestring(salt)");
93 salt_length = isc_buffer_usedlength(&buffer);
94 if (salt_length > DNS_NSEC3_SALTSIZE)
95 fatal("salt too long");
97 hash_alg = atoi(argv[2]);
99 fatal("hash algorithm too large");
100 iterations = atoi(argv[3]);
101 if (iterations > 0xffffU)
102 fatal("iterations to large");
104 dns_fixedname_init(&fixed);
105 name = dns_fixedname_name(&fixed);
106 isc_buffer_init(&buffer, argv[4], strlen(argv[4]));
107 isc_buffer_add(&buffer, strlen(argv[4]));
108 result = dns_name_fromtext(name, &buffer, dns_rootname, 0, NULL);
109 check_result(result, "dns_name_fromtext() failed");
111 dns_name_downcase(name, name, NULL);
112 length = isc_iterated_hash(hash, hash_alg, iterations, salt,
113 salt_length, name->ndata, name->length);
115 fatal("isc_iterated_hash failed");
117 region.length = length;
118 isc_buffer_init(&buffer, text, sizeof(text));
119 isc_base32hexnp_totext(®ion, 1, "", &buffer);
120 fprintf(stdout, "%.*s (salt=%s, hash=%u, iterations=%u)\n",
121 (int)isc_buffer_usedlength(&buffer), text, argv[1], hash_alg, iterations);