Back to Free Tools
FREE TOOLS
DNSKEY to DS Calculator
Calculate a DNSKEY key tag and DS digests from supplied public-key data.
DNS owner name, DNSKEY flags, DNSKEY algorithm number, Public-key Base64, DS digest
dnskey-ds-calculator.json (complete report)
Browser only
Runs locally in your browser. Your files, pasted content and generated output are not uploaded. Reset clears this tool’s working data.
This tool needs JavaScript. If it does not load, refresh the page and try again.
How to use this tool
- Enter values using the examples, or choose a local file where requested. Follow the displayed supported input shapes and limits.
- Choose Calculate result and inspect the complete result.
- Download result to save the primary file. Where supplied, additional links save source files and the full JSON report. Reset restores examples and clears output.
Examples
DNS owner name: example.com.
DNSKEY flags: 257
DNSKEY algorithm number: 13
Public-key Base64: axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpZP40Li/hp/m47n60p8D54WK84zV2sxXs7LtkBoN79R9Q==
DS digest: both
Limitations
- Compute canonical lowercase ASCII DNS owner wire data,protocol3 DNSKEY key tag and complete DS SHA256/type2 or SHA384/type4. Owner root or1–63-character ASCII letter/digit/underscore/hyphen labels within255 wire bytes;no escaped octets,Unicode/IDNA conversion or wildcard owner. Missing final dot means an absolute name. Public-key canonical padded Base64 may contain ASCII whitespace;decoded1–8192 bytes. Flags0–65535 and algorithm2–255 are numeric fields;algorithm1 special key tag is unsupported. Raw key bytes and algorithm/flag meanings are not authenticated or structurally certified. Digest calculation does not verify a public key,signature,chain,zone or trust. Shared100000-character/400000-byte combined input and4MiB report limits apply.
- Text fields are limited to100,000 UTF16 units each and400,000 combined UTF8 bytes; file fields have their own displayed limits. Combined output is at most4MiB. Processing stops after30 seconds; tool-specific bounds may be tighter.
- Generated source is a downloadable result and is not executed here. Inspection does not establish remote behavior, trust or standards certification.
Related tools
No items found.