[Opendnssec-develop] getting rid of HSM calls from the communicator

Rick van Rein rick at openfortress.nl
Wed Sep 9 10:48:15 UTC 2009


Hi,

> remember that the salt is published in the zone and does not have to
> be very random.

More accurately: it does not have to be a secret.  But it is important
that it cannot be influenced by an adversary.  That's the main reason
to use random numbers as salts.

-Rick



More information about the Opendnssec-develop mailing list