KeyTrap: how to break a DNS server with a single packet

The KeyTrap DoS attack, which can disable DNS servers with a single malicious packet exploiting a vulnerability in DNSSEC.