2011-02-16

One time passwords

Having fun with OATH/OTP devices.
Just coded it in to FireBrick!

http://www.firebrick.co.uk/fb2700/oath.php
at

11 comments:

  1. AnonymousWednesday, 16 February 2011 at 21:09:00 GMT

    clueless next?

    ReplyDelete
  2. Richy BWednesday, 16 February 2011 at 21:17:00 GMT

    Any chance of supporting Google Authenticator so people don't need "yet another device" (or MyPW, or YubiKey, or Verisign VIP or Mobile-OTP)?

    ReplyDelete
  3. RevKWednesday, 16 February 2011 at 21:37:00 GMT

    If it is OATH, it should work.

    ReplyDelete
  4. RevKWednesday, 16 February 2011 at 21:50:00 GMT

    Tested with the iPhone OATH generator, and that is fine.

    ReplyDelete
  5. Tony HoyleThursday, 17 February 2011 at 00:01:00 GMT

    Google authenticator is OAUTH. Probably the others are too these days.

    ReplyDelete
  6. talldavekThursday, 17 February 2011 at 00:15:00 GMT

    RevK: RFCs go in, C code comes out. The guy's a machine :)

    ReplyDelete
  7. RevKThursday, 17 February 2011 at 10:23:00 GMT

    talldavek, come on - that took me house yesterday afternoon to code that. Though mainly because I found a bug in another part of the system that I had to track down before I could get the data to save correctly.

    I wonder if we should make authentication server boxes, e.g. with embedded OATH stuff and RADIUS authentication server...

    ReplyDelete
  8. Adam PiggottThursday, 17 February 2011 at 12:03:00 GMT

    Thanks for the post - it prompted me to play with MOTP on my router and...well it Just Worked (TM)!

    ReplyDelete
  9. AnonymousFriday, 18 February 2011 at 16:55:00 GMT

    What's your iPhone OATH app of choice, out of curiosity?

    ReplyDelete
  10. RevKFriday, 18 February 2011 at 17:09:00 GMT

    I don't have an iPhone, and in fact have a proper key-ring gadget as per picture. So no real preference. I tried "OATH Token" and it worked.

    ReplyDelete
  11. Tony HoyleFriday, 18 February 2011 at 19:43:00 GMT

    Just in case anyone else is looking (took me a while to google it) the cheap OTP tokens are here: http://www.gooze.eu/otp-c200-token-time-based-h3-casing-1-unit

    ReplyDelete

Comments are moderated purely to filter out obvious spam, but it means they may not show immediately.

Subscribe to: Post Comments (Atom)

Fencing

Bit of fun... We usually put up some Christmas lights on the house - some fairy lights on the metal fencing at the front, but a pain as mean...

  • It's official, ADSL works over wet string
    Broadband services are a wonderful innovation of our time, using multiple frequency  bands  (hence the name) to carry signals over wires (us...
  • Air conditioning at home (planning permission!)
    For many years I used a small stand-alone air-conditioning unit in my study (the box room in the house) and I even had a hole in the wall fo...
  • EICAR test QR
    It seems there is something of a standard test string for anti virus ( wikipedia has more on this). The idea is that systems that look fo...