1dnssec-policy "ed448" { 2 dnskey-ttl 1234; 3 4 keys { 5 ksk key-directory lifetime P10Y algorithm 16; 6 zsk key-directory lifetime P5Y algorithm 16; 7 zsk key-directory lifetime P1Y algorithm 16 456; 8 }; 9}; 10 11zone "ed448.kasp" { 12 type primary; 13 file "ed448.kasp.db"; 14 dnssec-policy "ed448"; 15}; 16