dnsext-2----Page:6
1
2
3
4
5
6
7
DS
Long lived simple SHA-1 digest
Mitigating factors
Covers name
Digest must cover useable new key.
Key generation is harder than calculating new digest on random data
Risk: Low to medium
PPT Version