Questions tagged [one-time-password]
A one-time password is a password that is valid for only one session or transaction.
61
questions
1
vote
0
answers
107
views
Protect long-lived session token with One Time Password, fast verification of OTP
We have a classic web application, and when a user sign in, we return a session token (UUIDv4). The user can choose if the session should expire when the browser/app is closed or if he prefer to ...
- 51
1
vote
1
answer
47
views
HMAC-based one-time password, norm for how many counter events to check forwards in time (to see if user skipped a few)?
My bank seems to use something like HMAC-based one-time password, and it generates a new code every time I open it, and I could in theory skip a thousand codes (not use them to log in), and then the ...
- 11
3
votes
0
answers
952
views
How to migrate SafeNet MobilePASS seed to another TOTP app?
Based on How does SafeNet MobilePASS generate passwords?, I'm not sure if the MobilePASS token can be extracted for use in another TOTP app such as andOTP or KeePassXC. (I guess it depends whether the ...
- 163
1
vote
1
answer
56
views
Security concern for TOTP using keccak?
I want to implement TOTP in the same manner as RFC 6238 (https://www.rfc-editor.org/info/rfc6238), but keccak instead of SHA-1.
Keccak follows sponge function with the data rate r and the capacity c.
...
Curious_man
3
votes
2
answers
436
views
Impersonation attack on Lamport's one time password
So here I am, googling my brain on the possibilities of impersonation attempts by a MITM attacker on Lamport's one-time password scheme.
Here's my scenario:
Say we have a client and server setup. ...
- 153
0
votes
1
answer
81
views
Can a one time public key'd HMAC be secure?
Imagine authentication like $hmac = H(nonce, ciphertext)$. $nonce$ is truly random and chosen (randomly and WITHOUT replacement) from predetermined set $N$. So ${nonce} \in N$ and once used cannot be ...
- 15.1k
4
votes
2
answers
268
views
Concatenation of password and TOTP - possible issues
I have come across a two factor login mechanism using Time based OTP (TOTP). TOTP (6 digits) is shown to the user in an app.
There are two ways of logging in.
Method 1:
User inputs the username and ...
- 41
0
votes
0
answers
60
views
Is a deterministic PRNG seeded by with cryptographic hash a secure basis for generating one-time passwords?
I am building a passwordless auth scheme, and would like to avoid storing temp passwords in memory, so I wanted to derive them rather than store them. A valid password looks something like 'amendable-...
- 1
3
votes
1
answer
366
views
Create a TOTP for machines using HMAC or AES
I'm trying to create a sort of Time-based One Time Password (TOTP) where machines are involved (not humans). In this kind of TOTP the step is 15 minutes between one code to the next one and both ...
- 33
2
votes
2
answers
689
views
Forgery attack on Poly1305 when the key and nonce reused
Introduction: I've tried to find how reusing one-time key compromises itself but only found information that it breaks the encryption entirely, it is written everywhere. But since no methods to reuse ...
- 21
6
votes
2
answers
2k
views
Difference Between an Authentication Token and an OTP (One Time Password)
I would like to better understand why some people use the term One Time Password and other Authentication Token.
I have noticed that in academic circles, there is a differentiation between ...
- 862
2
votes
1
answer
98
views
OTP Scheme where only one party can generate the OTP, but both parties can verify it's validity
As far as I understand, OTP usually works on a superficial layer by having two parties both know of a key and then authenticate each other by sharing a hash of the key and some sort of counter (e.g. ...
- 315
0
votes
1
answer
97
views
The security of adding random noise many time pad
In may application, I have a series of real number $\{v_1, v_2, \ldots, v_N\}, v_i\in\mathbb{R}$. To protect them, I add a random noise $r\in\mathbb{R}$ to each themselves like one-time-pad encryption ...
2
votes
1
answer
491
views
Security Considerations in using SHA-1 for One Time Passwords
SHA-1 is considered broken. That's why I'm assuming that using SHA-1 for RFC2289 OTPs is broken as well. Is this assumption correct?
Going further with this assumption using SHA-1 for RFC4226 HOTPs ...
- 23
0
votes
1
answer
1k
views
Counters in HOTP
In the HOTP (HMAC-based One-time Password) algorithm the client and the server can have different counter values. Es. if an attacker tries to crack the password with no success.
How does HOPT deal ...
- 461
1
vote
1
answer
155
views
What is / How would I calculate the number of bits(?) I need to make the probability of a collision very small?
If I wanted to create a TOTP-esque algorithm that generated a string n characters long, with each character being a base64 character, generated from a user secret <...
- 113
2
votes
2
answers
2k
views
Are ephemeral keys symmetric or asymmetric? [closed]
My question is: Are ephemeral keys symmetric or asymmetric?
If symmetric, can ephemeral keys be created based on a (UserID || nonce)?
- 305
0
votes
0
answers
68
views
One time code appended to password
Apologies in advance, I'm a beginner and my knowledge of terminology in this field probably reflects that.
I have a question about one-time codes being used with passwords. What inspires me to ask ...
- 101
1
vote
2
answers
455
views
Is it possible to use crib drag on base64 cipher text?
I am pretty new to the cryptography scene but I wanted to know if it is possible to use crib dragging on cipher text which doesn't contain words? This data would be encrypted using the same key with a ...
- 113
3
votes
1
answer
410
views
Can modular multiplicative inverse be used to create a secure cipher?
Let $N$ be a large number; and $(e, d, N)$ be a secret-key; where $e$ is a one-time random factor, and large enough (say the more or less the same number of bits as $N$), where $e < N$ and $e * d \...
- 591
0
votes
2
answers
619
views
Reversed One-Time-Password - generating secret server side
In our company we're thinking about a new auth scheme (not a 2FA!) where vault is secured by secret. User should be able to access the vault just by typing the One-Time-Password (OTP) into the webform....
- 103
0
votes
2
answers
54
views
Does two-factor authentication require one time use of one of the factors?
Do we need one of the factors of two factor authentication to be one-time use?
TOTP and password are considered two factor authentication, but does smart card and password also count as two-factor ...
- 305
1
vote
1
answer
343
views
TOTP intermittently does not return the same code when generated within the same time step
So we have the need for using a TOTP to generate a code on the server to send to a mobile client, I have been testing code generation with the following 3 java repos:
https://github.com/jchambers/...
- 113
3
votes
3
answers
2k
views
Security concern with TOTP
I am pretty new to cryptography and I have been studying up on TOTP (Time Based OTP) and while I have learnt how the computation works, I'm unable to figure out why using TOTP makes a system more ...
- 133
1
vote
2
answers
3k
views
Recommended way to Implement One Time Password?
I need help with the process/commands needed to implement the below functionality:
I'm modeling an OTP System, in which the user would request an OTP and the app will send him one. Later the user ...
- 21
2
votes
1
answer
1k
views
Is key derivation of a token shared secret necessary for usage of token in TOTP as specified by RF6238?
TL;DR: Is it necessary to generate a 'random' key from a shared token secret string before putting it into a TOTP algorithm that follows the RFC 6238 specification? Or is it okay for me to put the ...
- 149
3
votes
1
answer
383
views
Stateless user-generated one-time passwords
I've been working on my course project lately and got stuck with the problem which I reduced to the following abstract protocol:
Alice generates an ID key and gives it to Bob.
Bob generates some ...
- 156
2
votes
0
answers
855
views
Need help to get correct TOTP [closed]
I am really confused and need help on this problem related to TOTP as specified in RFC6238 here: https://www.rfc-editor.org/rfc/rfc6238#section-1.2.
So I am now given a task to implement the RFC6238 ...
- 149
4
votes
2
answers
249
views
Is there a perpetual 2-factor-authentication scheme that allows temporary password generation?
Recall that current forms of two-factor authentication (2FA) rely on:
Something you know, i.e. your password
Something you have, i.e. your one-time password (OTP) generator on a trusted device
The ...
- 1,349
10
votes
2
answers
2k
views
Alternative for RFC 6238/4226 - one time password via SMS (single-factor authentication)
Currently we have implemented One Time Passwords (OTP) as second authentication which works well. We use TOTP - RFC 6238
Some clients would like to have a "sms only" login, so it's single factor ...
- 157
3
votes
1
answer
186
views
What's the industry standard for verifying phone number ownership?
What's the industry standard for generating single-use SMS codes verifying phone number ownership?
I'm currently evaluating two main alternatives, both based on sending a verification code to that ...
- 133
2
votes
3
answers
1k
views
One Time Password generation algorithm to ensure data/transaction integrity?
Here is my use case:
A user is trying to transfer money to his friend's account. He enters transaction details on banking website. Bank receives it and then
Bank sends transaction details (receiver ...
- 121
5
votes
1
answer
821
views
Does Lamport's authentication scheme still work if the hash function is not collision-resistant?
Geology professor Peter McMenteur gets interested in Lamport’s authentication
scheme. After a brief study, he claims that the scheme works even if the hash
function is substituted by a function ...
- 59
2
votes
2
answers
157
views
How do I pick variable length passwords uniformly at random?
How do I pick passwords uniformly at random when given a min and max length?
It seems that if I first pick a random length, then choose random characters, this procedure will choose shorter length ...
user9070
1
vote
3
answers
494
views
Possible to generate a one time secret which all nodes on the distributed network can know but cannot pre compute
I have a distributed P2P network.
Everyday, I want each node to have a secret which is only valid for that day, while each of the other remaining nodes on the network will be able to calculate the ...
- 11
3
votes
2
answers
178
views
Security analysis of this one time password based scheme for copy protection
Imagine such protocol.
Client and server initially share secret K[0].
When client wants to contact server she sends server K[0] and her ID.
Server accepts request, and generated new random K[1] and ...
user29112
1
vote
3
answers
888
views
Which method to generate one time password?
I'm looking for a concrete algorithm to generate one time passwords. The situation is as follows:
Alice and Bob exchanged a passphrase over a secure channel in the beginning. They want to ...
- 113
1
vote
1
answer
298
views
How to store and use a Cryptographic Seed in a database [closed]
Companies such as Barclays use cryptographic seeds (for their PINsentry system), RSA do the same for RSA SecurID, but how do they safely secure the seeds in the database.
With passwords you just hash ...
- 121
1
vote
1
answer
1k
views
Retrieve timestamp from TOTP value
TOTP (Time-based One-Time Password) as I understand is an algorithm that uses the current time as a variable along with a shared key to generate a secured token. Wiki page for reference: http://en....
- 113
1
vote
0
answers
391
views
Complexity of verifying OTP secret
What is the minimum number of unique pairs of digests and inputs to a one-time pass needed to verify that a secret is equal to a ...
- 289
1
vote
1
answer
340
views
Detect desynchronization in HOTP authentication [duplicate]
In HOTP authentication, is there a way for a system to detect that the token has been desynchronized? If so how does it know that the OTP was generated from a desynchronized (but valid) token and is ...
- 19
2
votes
1
answer
1k
views
AES and One Time Passwords
I have used AES to secure my short term wireless network(1 day lifetime). The same symmetric key is used for securing entire network traffic. is it possible to improve security with onetime password ...
- 29
2
votes
2
answers
1k
views
counter to indicate hotp count
I was trying to figure out how HOTP kept from wrapping over, when I saw this explanation of how it works, by Thomas Pornin [source]:
The intended scenario is the following: the client has a ...
- 23
2
votes
1
answer
760
views
Practical usage of S/KEY
The One-Time-Password (OTP) topic became quite popular in the recent years. But unlike the well-known HOTP and TOTP standards I haven't heard about any applications/systems implementing and using the ...
- 373
1
vote
1
answer
819
views
OTP sequence uniqueness
Is it possible to use Time-based One Time Password (TOTP) algorithms to generate tokens from multiple channels (where a channel is defined as a "user" using a certain shared key $K_c$ for channel $c$),...
Basie Kok
2
votes
4
answers
3k
views
Why not just generate random strings for one-time password (OTP)?
http://en.wikipedia.org/wiki/One-time_password#How_OTPs_are_generated_and_distributed
Why have so many methods to generate OTPs, why not just use just random strings?
- 1,363
10
votes
2
answers
5k
views
Why are HOTP and TOTP implementations all using 6 digits and not more?
I was checking the RFC's after wondering for some time. In RFC 4226 - HOTP: An HMAC-Based One-Time Password Algorithm, it states on the appendix:
A simple enhancement in terms of security would be to ...
- 333
6
votes
1
answer
612
views
How HOTP values are validated according to RFC 4226
In Section 7.2 "Validation of HOTP Values" of the HOTP spec (RFC 4226) it says, in part,
The HOTP client (hardware or software token) increments its counter
and then calculates the next ...
- 317
10
votes
2
answers
12k
views
How does SafeNet MobilePASS generate passwords?
We use MobilePASS at work but the latest version of the android client seems to be buggy so I wanted to have a go at implementing the algorithm myself.
You can download the client to play with here: ...
- 161
1
vote
1
answer
205
views
Why does the server in S/KEY authentication only store a single password?
I've been reading about the S/KEY One-Time Password system on wikipedia here and was wondering why the server only stores a single password and not the list of one-time passwords like the client does. ...
- 113