Lines Matching defs:nsec3
2 * validator/val_nsec3.h - validator NSEC3 denial of existence functions.
40 * The functions help with NSEC3 checking, the different NSEC3 proofs
43 * NSEC3
87 * The OPT-OUT bit in the NSEC3 flags field.
93 * The unknown flags in the NSEC3 flags field.
94 * They must be zero, or the NSEC3 is ignored.
98 /** The SHA1 hash algorithm for NSEC3 */
102 * Cache table for NSEC3 hashes.
111 * Determine if the set of NSEC3 records provided with a response prove NAME
125 * sec_status SECURE of the Name Error is proven by the NSEC3 RRs,
139 * 1) Normal NODATA -- qname is matched to an NSEC3 record, type is not
142 * 2) ENT NODATA -- because there must be NSEC3 record for
145 * 3) NSEC3 ownername NODATA -- qname matched an existing, lone NSEC3
146 * ownername, but qtype was not NSEC3. NOTE: as of nsec-05, this case no
163 * sec_status SECURE of the proposition is proven by the NSEC3 RRs,
188 * sec_status SECURE of the proposition is proven by the NSEC3 RRs,
216 * sec_status SECURE of the proposition is proven by the NSEC3 RRs,
243 * sec_status SECURE of the proposition is proven by the NSEC3 RRs,
254 * The NSEC3 hash result storage.
256 * The nodes detail how a set of parameters (from nsec3 rr) plus
263 struct ub_packed_rrset_key* nsec3;
289 * Initialise the NSEC3 cache table.
290 * @param ct: the nsec3 cache table.
298 * Used internally by the nsec3 proof functions in this file.
305 * @param nsec3: the rrset with parameters
306 * @param rr: rr number from d that has the NSEC3 parameters to hash to.
315 * -1 if the NSEC3 rr was badly formatted (i.e. formerr).
318 struct sldns_buffer* buf, struct ub_packed_rrset_key* nsec3, int rr,
323 * zone name (taken from the nsec3 owner name) appended.
324 * @param rrset: the NSEC3 rrset.
325 * @param r: the rr num of the nsec3 in the rrset.
329 * bad format nsec3 record).
344 * bad format nsec3 record).
350 * Get NSEC3 parameters out of rr.
351 * @param rrset: the NSEC3 rrset.
352 * @param r: the rr num of the nsec3 in the rrset.
353 * @param algo: nsec3 hash algo.
357 * @return 0 if bad formatted, unknown nsec3 hash algo, or unknown flags set.
363 * Get NSEC3 hashed in a buffer
369 * @param salt: salt for nsec3
380 * see if NSEC3 RR contains given type
381 * @param rrset: NSEC3 rrset
389 * return if nsec3 RR has the optout flag
390 * @param rrset: NSEC3 rrset
397 * Return nsec3 RR next hashed owner name
398 * @param rrset: NSEC3 rrset
415 * @param rrset: the rrset of the NSEC3.
Indexes created Sat Feb 28 05:31:39 UTC 2026