see. http://dnscurve.org/