¹³It is a feature of the dnssec-keygen program to always creates two files, even when it is generating symmetric keys.