2011-02-16

One time passwords

Having fun with OATH/OTP devices.
Just coded it in to FireBrick!

http://www.firebrick.co.uk/fb2700/oath.php
at

11 comments:

  1. AnonymousWednesday 16 February 2011 at 21:09:00 GMT

    clueless next?

    ReplyDelete
  2. Richy BWednesday 16 February 2011 at 21:17:00 GMT

    Any chance of supporting Google Authenticator so people don't need "yet another device" (or MyPW, or YubiKey, or Verisign VIP or Mobile-OTP)?

    ReplyDelete
  3. RevKWednesday 16 February 2011 at 21:37:00 GMT

    If it is OATH, it should work.

    ReplyDelete
  4. RevKWednesday 16 February 2011 at 21:50:00 GMT

    Tested with the iPhone OATH generator, and that is fine.

    ReplyDelete
  5. Tony HoyleThursday 17 February 2011 at 00:01:00 GMT

    Google authenticator is OAUTH. Probably the others are too these days.

    ReplyDelete
  6. talldavekThursday 17 February 2011 at 00:15:00 GMT

    RevK: RFCs go in, C code comes out. The guy's a machine :)

    ReplyDelete
  7. RevKThursday 17 February 2011 at 10:23:00 GMT

    talldavek, come on - that took me house yesterday afternoon to code that. Though mainly because I found a bug in another part of the system that I had to track down before I could get the data to save correctly.

    I wonder if we should make authentication server boxes, e.g. with embedded OATH stuff and RADIUS authentication server...

    ReplyDelete
  8. Adam PiggottThursday 17 February 2011 at 12:03:00 GMT

    Thanks for the post - it prompted me to play with MOTP on my router and...well it Just Worked (TM)!

    ReplyDelete
  9. AnonymousFriday 18 February 2011 at 16:55:00 GMT

    What's your iPhone OATH app of choice, out of curiosity?

    ReplyDelete
  10. RevKFriday 18 February 2011 at 17:09:00 GMT

    I don't have an iPhone, and in fact have a proper key-ring gadget as per picture. So no real preference. I tried "OATH Token" and it worked.

    ReplyDelete
  11. Tony HoyleFriday 18 February 2011 at 19:43:00 GMT

    Just in case anyone else is looking (took me a while to google it) the cheap OTP tokens are here: http://www.gooze.eu/otp-c200-token-time-based-h3-casing-1-unit

    ReplyDelete

Comments are moderated purely to filter out obvious spam, but it means they may not show immediately.

Subscribe to: Post Comments (Atom)

Is it spring yet?

This is more like it, but is only one day! Most of our import (and today it is likely all of our import) was 2am to 5am at 14.71p. Most expo...

  • It's official, ADSL works over wet string
    Broadband services are a wonderful innovation of our time, using multiple frequency  bands  (hence the name) to carry signals over wires (us...
  • Air conditioning at home (planning permission!)
    For many years I used a small stand-alone air-conditioning unit in my study (the box room in the house) and I even had a hole in the wall fo...
  • EICAR test QR
    It seems there is something of a standard test string for anti virus ( wikipedia has more on this). The idea is that systems that look fo...