manually generating tsig keys

Mark Andrews Mark_Andrews at
Sun Feb 8 22:36:34 UTC 2009

In message <20090206194146.GA24736 at>, Justin T Pryzby writes:
> ARM9.5 still mentions manual generation of TSIG data:
> Is there any advtantage to using -keygen ?

	It really depends  on how you are going to use the key.
	For zone transfers there is no benefit as you have to copy
	and paste at both ends.  For nsupdate there is benefit as
	you can use "nsupdate -k keyfile".

>  ISTR some mention of an
> algorithm used to minimize the possibility of collisions.  Or is that
> true for any key used with HMAC?
> Justin
> _______________________________________________
> bind-users mailing list
> bind-users at
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at

More information about the bind-users mailing list