This is the project management website of various DNSSEC research projects of the Distributed Systems group at the University of Duisburg-Essen.

• List of open tickets
• ​Browse the contents of the SVN repository (partly restricted access)
• ​http://dnssec.vs.uni-due.de: Website of DNSSEC measurements project
• ​https://www.vs.uni-due.de: Website of the Distributed Systems research group
• Contact: dnssec@… (dnssec _a_t_ vs.uni-due.de)

nsec3breaker

nsec3breaker is a tool to crawl and break the NSEC3 hashes of a DNS zone. This is work in progress -- we haven't released a stable version yet.

Statistics: ​https://crawler.vs.uni-due.de:8443/files/stats.html (expect HTTPS warning, custom-signed certificate)

Download

• svn co https://www.vs.uni-due.de/public-svn/dnssec/nsec3breaker/trunk nsec3breaker

Then take a look at the ​HOWTO.txt

Terms and Definitions

• Zone project: all tasks related to a zone, e.g. "de."
• Subproject: specific distributed computing project, e.g. brute-force for 7 characters, or markov attack with defined parameter set
• Job: work unit distributed to client by distributed computing server (nsec3dist)
• Chunk: subpart of one job, computed by client in a batch of all chunks of a job

Wiki

• CrawlerExample
• Performance report (Host brunhilde only)