2.2.2.2.4.24 DNS_RPC_RECORD_NSEC3

The DNS_RPC_RECORD_NSEC3 structure SHOULD<21> specify an NSEC3 resource record as specified in [RFC5155] section 3. This record MUST be formatted as follows.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

chAlgorithm

bFlags

wIterations

bSaltLength

bHashLength

salt (variable)

...

nextHashedOwnerName (variable)

...

bitmaps (variable)

...

chAlgorithm (1 byte): A value that specifies the cryptographic hash algorithm used to construct the hash value, as specified in [RFC5155] section 3.1.

bFlags (1 byte): A value that specifies NSEC3 processing flags, as specified in [RFC5155] section 3.1.

wIterations (2 bytes): A value that specifies the number of additional times the hash function has been performed, as specified in [RFC5155] section 3.1.

bSaltLength (1 byte): A value that specifies the length of the salt field, in octets.

bHashLength (1 byte): A value that specifies the length of the nextHashedOwnerName field, in octets.

salt (variable): A value that specifies the salt to be appended to the original owner name before hashing, as specified in [RFC5155] section 3.1.

nextHashedOwnerName (variable): A value that specifies the next hashed owner name in hash order, as specified in [RFC5155] section 3.1.

bitmaps (variable): A value that specifies the DNS types that exist at the original owner name of the NSEC3 record, as specified in [RFC5155] section 3.1.