Skip to main content
13 events
when toggle format what by license comment
Oct 12, 2016 at 16:37 answer added fgrieu timeline score: 1
Oct 12, 2016 at 15:18 answer added SEJPM timeline score: 1
Oct 12, 2016 at 15:10 history edited fgrieu CC BY-SA 3.0
Remove extra word
Oct 12, 2016 at 15:07 comment added fgrieu @aMa: ah, that kind of OTP, where the communication link to the user is assumed secure. This is the opposite of the usual assumption in cryptography (by default we assume communication links can at least be passively eavesdropped). Like Gabriel Vince I was thinking of an OTP generated by a gizmo like this.
Oct 12, 2016 at 15:04 comment added gusto2 Usually computing the OTP happens off channel, in a provided crypto device (a card reader together with the bank card, mobile phone, ...)
Oct 12, 2016 at 15:02 comment added aMa @fgrieu, First of all thank you for editing. What is odd about bank sending OTP back to the user along with the transaction details that he had entered earlier? That is how it normally works, right? User receives OTP + transaction details via SMS or some different channel. Then user verifies the transaction details and enter OTP to confirm the transaction.
Oct 12, 2016 at 14:59 answer added gusto2 timeline score: -1
Oct 12, 2016 at 14:58 history edited aMa CC BY-SA 3.0
added 136 characters in body
Oct 12, 2016 at 14:23 comment added fgrieu Welcome to crypto.se I took the liberty to edit your message to clarify that OTP is for One Time Password, not One Time Pad. Can you check that the bank first sends the OTP? That seems odd.
Oct 12, 2016 at 14:06 history edited fgrieu CC BY-SA 3.0
Clarify that OTP stands for One Time Password, rather than One TIme Pad
Oct 12, 2016 at 13:13 history edited aMa CC BY-SA 3.0
deleted 1 character in body
Oct 12, 2016 at 13:11 review First posts
Oct 12, 2016 at 13:42
Oct 12, 2016 at 13:08 history asked aMa CC BY-SA 3.0