dnsext-2----Page:6
1  2  3  4  5  6  7 

DS
Long lived simple SHA-1 digest
Mitigating factors
Covers name
Digest must cover useable new key.
Key generation is harder than calculating new digest on random data
Risk: Low to medium
PPT Version