bind9/lib/isc/include
Mark Andrews 8d6e1c1a48
Enforce NSEC3 record consistency
NSEC3 hashes are required to fit within a single DNS label.  Since there
are 5 bits per label byte without pad characters, the maximum hash size
is floor(63*5/8) (39 bytes).

This patch enforces this maximum length for unknown algorithms, while
strictly enforcing the exact expected digest length for known algorithms
like SHA-1.

(cherry picked from commit 3801d0ebbf)
2026-02-24 16:31:33 +01:00
..
isc Enforce NSEC3 record consistency 2026-02-24 16:31:33 +01:00
.clang-format Add separate .clang-format files for headers 2020-02-14 09:31:05 +01:00