fixed signed-unsigned issue in DNS checkpointing

Loss of entropy can be discussed at a later time, but is
not deemed a significant issue for now.

resolves #166