Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [two-factor-authentication]

2
votes
2answers
68 views

Authentication without decrypting the password?

To my knowledge it works like this: The server receives the username-password values over a secure & encrypted channel. The username-password values are decrypted in the server and are present as ...
0
votes
0answers
24 views

Rolling Code via Encrypted Index vs Pre-Generated Keys

I am planning on designing a system that needs a password to be operated, using a rolling key. Now I am facing two options, as far as I am concerned: Having an index saved, which will be incremented ...
0
votes
2answers
44 views

Does two-factor authentication require one time use of one of the factors?

Do we need one of the factors of two factor authentication to be one-time use? TOTP and password are considered two factor authentication, but does smart card and password also count as two-factor ...
3
votes
1answer
175 views

Is using a smart card and password two-factor authentication?

I use a smart card - as read only device - for user identity as well as a password: The smart card (holds the user ID) is something I have; The password is something I know. Is this still two-factor ...
0
votes
1answer
67 views

Re-using information from the first factor for the second factor

Is it safe to re-use my username and password as information for the 2nd-factor? For instance: the first factor is the username and password; the second factor is $H(H(username) \oplus H(password \| ...
4
votes
2answers
163 views

Could a 6502 CPU safely compute a SHA-1 hash in a reasonable length of time?

The 6502 is the CPU in a Tamagotchi (which can be hacked to run custom code). SHA-1 is the default hash used for TOTP (the algorithm used by two-factor authentication tokens and apps). Hopefully you ...
2
votes
3answers
421 views

Security concern with TOTP

I am pretty new to cryptography and I have been studying up on TOTP (Time Based OTP) and while I have learnt how the computation works, I'm unable to figure out why using TOTP makes a system more ...
0
votes
0answers
18 views

Is it possible to derive domain from a AD server user certificate

We are facing an issue to get the domain to which a user belongs in AD server. Is there a possible derivation which can provide us domain details from a user certificate, if user belongs to one. Which ...
4
votes
2answers
140 views

Is there a perpetual 2-factor-authentication scheme that allows temporary password generation?

Recall that current forms of two-factor authentication (2FA) rely on: Something you know, i.e. your password Something you have, i.e. your one-time password (OTP) generator on a trusted device The ...