anchor.diff:  normalise_dname(Name) -> dns:dname_to_lower(iolist_to_binary(Name)).
   
   normalise_dname_to_labels(Name) -> dns:dname_to_labels(normalise_dname(Name)).
  +
  +decode_asn1_dss_sig(Bin) when is_binary(Bin) ->
  +    {ok, #'DSS-Sig'{r = R, s = S}} = 'DNS-ASN1':decode('DSS-Sig', Bin),
  +    {R, S}.
  +
  +encode_asn1_dss_sig(R, S) when is_integer(R) andalso is_integer(S) ->
  +    Rec = #'DSS-Sig'{r = R, s = S},
  +    {ok, List} = asn1rt:encode('DNS-ASN1', 'DSS-Sig', Rec),
  +    iolist_to_binary(List).
  +
  
positive.code: 		    when Alg =:= ?DNS_ALG_DSA orelse
  			 Alg =:= ?DNS_ALG_NSEC3DSA ->
  		      <<_T, R:20/unit:8, S:20/unit:8>> = Sig,
  		      AsnTuple =  {'Dss-Sig-Value', R, S},
  		      AsnSig = public_key:der_encode('Dss-Sig-Value', AsnTuple),
  		      AsnSigSize = byte_size(AsnSig),
  		      AsnBin = <<AsnSigSize:32, AsnSig/binary>>,
  		      crypto:dss_verify(none, SigInput, AsnBin, Key);
  		 ({_, Alg, Key})
  		    when Alg =:= ?DNS_ALG_NSEC3RSASHA1 orelse
  			 Alg =:= ?DNS_ALG_RSASHA1 orelse
  
negative.code: -export([add_keytag_to_dnskey/1]).
  
  -include("dns.hrl").
  -include("DNS-ASN1.hrl").
  -include("dnssec_tests.hrl").
  
  -define(RSASHA1_PREFIX, <<16#30, 16#21, 16#30, 16#09, 16#06, 16#05, 16#2B,
  