Provided by: bind9_9.3.2-2ubuntu1_i386 bug          dnssec-
keygen - DNSSEC key generation tool          dnssec-keygen {-a
algorithm} {-b keysize} {-n nametype} [-c class] [-e]
[-f flag] [-g generator] [-h] [-k] [-p protocol]
[-r randomdev] [-s strength] [-t type] [-v level] {name}
2535 and RFC <TBA\>. It can also generate keys for use with TSIG
(Transaction Signatures), as defined in RFC 2845.          -a
algorithm               Selects the cryptographic algorithm. The
value of algorithm must               be one of RSAMD5 (RSA) or
RSASHA1, DSA, DH (Diffie Hellman), or               HMAC-MD5.
These values are case insensitive.                 Note 2: HMAC-
MD5 and DH automatically set the -k flag.         -b keysize
depends on the algorithm used. RSAMD5 / RSASHA1 keys must be
between 512 and 2048 bits. Diffie Hellman keys must be between
128 and 4096 bits. DSA keys must be between 512 and 1024 bits