badkeys / keyfinder

Search private keys in source code etc.
MIT License
1 stars 0 forks source link

Support DNSSEC / BIND key format #1

Open hannob opened 1 day ago

hannob commented 1 day ago

Support the DNSSEC private key format used by Bind and others, see examples (RSA): https://gitlab.isc.org/isc-projects/bind9/-/blob/main/tests/dns/testkeys/Kexample.+008+20386.private?ref_type=heads https://www.rfc-editor.org/rfc/rfc5702.html

Example (ECDSA): https://www.rfc-editor.org/rfc/rfc6605.html

Example (EdDSA): https://www.rfc-editor.org/rfc/rfc8080.html

The different versions (v1.2, v1.3) appear to only have minor differences, there does not appear to be a specification anywhere. We can probably have a "fuzzy" parser that will work with any version.