diff --git a/lib/dnsjava-2.0.0.jar b/lib/dnsjava-2.0.0.jar
index 4c833ef..2c18fbb 100644
Binary files a/lib/dnsjava-2.0.0.jar and b/lib/dnsjava-2.0.0.jar differ
diff --git a/src/com/verisignlabs/dnssec/security/ProtoNSEC3.java b/src/com/verisignlabs/dnssec/security/ProtoNSEC3.java
index c2d2a7c..d0a6a40 100644
--- a/src/com/verisignlabs/dnssec/security/ProtoNSEC3.java
+++ b/src/com/verisignlabs/dnssec/security/ProtoNSEC3.java
@@ -197,7 +197,7 @@ public class ProtoNSEC3
     int len = owner.length < o_owner.length ? o_owner.length : owner.length;
     for (int i = 0; i < len; i++)
     {
-      int d = (owner[i] - o_owner[i]);
+      int d = ((owner[i] & 0xFF) - (o_owner[i] & 0xFF));
       if (d != 0) return d;
     }
     return owner.length - o_owner.length;