From owner-freebsd-security@FreeBSD.ORG Tue Jul 8 10:31:55 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DC7DE106567F for ; Tue, 8 Jul 2008 10:31:55 +0000 (UTC) (envelope-from ivangrvr299@gmail.com) Received: from hu-out-0506.google.com (hu-out-0506.google.com [72.14.214.231]) by mx1.freebsd.org (Postfix) with ESMTP id 66B9A8FC16 for ; Tue, 8 Jul 2008 10:31:55 +0000 (UTC) (envelope-from ivangrvr299@gmail.com) Received: by hu-out-0506.google.com with SMTP id 34so8866957hue.8 for ; Tue, 08 Jul 2008 03:31:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:mime-version:content-type; bh=yuYRwua3PqUOAiADGCaoiQtMBhqU6tJy8r/E8L43328=; b=FTE9sKwAvAPCpnK19eDe4uDw3/pgNlnGSW+YDVNgzqRtS3AeiDxt+4tJv/eBsNkQtI 0p8LcN08c+S82xsIRS4/s2FkOuxKybgmG/93XhqtgnAJ0+vY7N+Dj15aX+JFCRxVf1bO 01GIRT5XtwxoMeTpXaC7ku9uFyKdxbCs/K2NM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type; b=A3Mu7v0LOrnNs4sOqo81EDpTiHRq3Q47jYOIlTcms+FX5THEXmdwK2sR93bnEkKGNo AoHA6fk9uzn9a5Fsgbw4XbiXOs4ry3YjIJaKY70AaYwBw2Mq4/LWz7EeKpBABBe5Cd0L jEYnqcsC1zQleT9HXZNMBLpIfCI5j0Ce1QfcY= Received: by 10.125.150.14 with SMTP id c14mr1246516mko.125.1215512198098; Tue, 08 Jul 2008 03:16:38 -0700 (PDT) Received: by 10.125.110.8 with HTTP; Tue, 8 Jul 2008 03:16:37 -0700 (PDT) Message-ID: <670f29e20807080316s6cf57612jf5135bfd340e3328@mail.gmail.com> Date: Tue, 8 Jul 2008 15:46:37 +0530 From: "Ivan Grover" To: freebsd-security@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: OPIE Challenge sequence X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jul 2008 10:31:55 -0000 Hi , Iam trying to choose OPIE as my OTP implementation for authenticating the clients. I have the following queries, could anyone please let me know these -- why does the challenge in OPIE are in predetermined form.. is it for determining the decryption key for the encrypted passphrase(stored in opiekeys). -- is it possible to generate random challenges using opiechallenge Any pointers/links will be very much helpful. Regards, Ivan