DNSSEC Lockpick

This program makes it trivial to find DNSSEC keys with colliding tags. Allows generating arbitrary number of keys for a given zone and algorithm, both for a predetermined tag and for an arbitrary one. Supports output in the form of a BIND-compatible zone file.

Usage:

-algorithm string
   	which algorithm to use; options are rsa, ecdsa, ed25519 (default "ecdsa")
-fast
   	use fast iteration mode (default true)
-file
   	create a zone file
-iter int
   	specify maximum allowed iteration count; -1 for unlimited (default -1)
-n int
   	how many keys to generate (default 2)
-tag int
   	specify keytag to search for; -1 for any (default -1)
-test
   	run in test mode
-testiter int
   	number of iterations in test mode (default 100)
-zone string
   	the zone to generate for (default "example.com")

Use make build to compile.