TKEY (transaction key) is a record type of the Domain Name System (DNS). TKEY resource records (RRs) can be used in a number of different modes to establish shared keys between a DNS resolver and name server.

TKEY record format

Mode field values

• 0 – Reserved

• 1 – Server assignment

• 2 – Diffie–Hellman key exchange

• 3 – Generic Security Service Algorithm for Secret Key Transaction

• 4 – Resolver assignment

• 5 – Key deletion

• 6–65534 – Available

• 65535 – Reserved

See also

• Domain Name System

• List of DNS record types

References

• , "Secret Key Establishment for DNS (TKEY RR)", D. Eastlake, September 2000