Questions tagged [totp]

Time-based One-Time Password algorithm (TOTP) is an algorithm that computes a one-time password from a shared secret key and the current time.

Time-based One-Time Password algorithm (TOTP) is an algorithm that computes a one-time password from a shared secret key and the current time.

TOTP is based on HOTP with a timestamp replacing the incrementing counter.

The current timestamp is turned into an integer time-counter (TC) by defining the start of an epoch (T0) and counting in units of a time interval (TI).

Wiki: https://en.wikipedia.org/wiki/Time-based_One-time_Password_Algorithm

172 questions
0
votes
1 answer

Is the type of Cognito MFA used configured during Pool setup?

The Cognito Javascript SDK example snippets contain the following markup: cognitoUser.enableMFA(function(err, result) { if (err) { alert(err); return; } console.log('call result: ' + result); }); Does Cognito…
-1
votes
2 answers

using google authenticator PAM with vsFTPd on RedHat

I have a requirement to use a TOTP-based authentication on some RedHat 8.7 servers running vsFTPd. I've managed to get TOTP working with vsFTPd on Debian / Ubuntu, but haven't had any luck so far on RedHat. I have been able to get TOTP working on…
tfboy
  • 1
  • 1
-1
votes
1 answer

How do we handle Microsoft Azure mobile OTP in Jmeter?

I tried to record an application which uses Microsoft Azure Totp. I couldn't handle otp. Please help. Unable to disable toptp
-1
votes
1 answer

Do you think it is possible to reverse engineer a TOTP secret. Here is my concept. Educational Purpose

Long story short, wanted to transfer one of the App OTP to do some automation. Problem: No Secret to get the OTP code By using onetimepass, understood how OTP is generated. (https://pypi.org/project/onetimepass/). I have to pass my secret and a time…
Cytan
  • 53
  • 6
-1
votes
1 answer

Implementing TOTP 8086 Assembly (TASM)

I'm trying to implement TOTP on 8086 assembly. The procedures that return unix time/30 and HMAC-SHA1 are working perfectly(checked). I'm using the key "0000000000" which is equal to 0x30303030303030303030(GAYDAMBQGAYDAMBQ in base32) and I'm getting…
Shachaf Zohar
  • 165
  • 1
  • 13
-1
votes
1 answer

How secret key shared using barcode is secure in 2FA?

I am implementing Time based OTP (TOTP) for my network security course. The last time I gave presentation my instructor asked me "If you're going to share secret key by generating QR code and then letting the client(soft token) scan it, how are you…
Prakhar
  • 52
  • 10
-1
votes
1 answer

Wordpress one time access to password protected page

I am creating a wordpress page which is password protected. It holds a form which needs to be submitted after a timed period of 3h. After that period the user should be logged out, no matter wether he completed the form or not. He should not be able…
1 2 3
11
12