Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Aug 2012 09:03:43 -0700
From:      Xin Li <delphij@delphij.net>
To:        =?UTF-8?B?RGFnLUVybGluZyBTbcO4cmdyYXY=?= <des@des.no>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Hardware TOTP tokens
Message-ID:  <5033B15F.3020905@delphij.net>
In-Reply-To: <86393gpdrp.fsf@ds4.des.no>
References:  <86393gpdrp.fsf@ds4.des.no>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 8/21/12 6:37 AM, Dag-Erling Smørgrav wrote:
> I'm looking for *rekeyable* TOTP (RFC 6238) tokens - preferably,
> but not necessarily OATH-certified.  Does anyone know where I can
> find something like that?
> 
> Alternatively, does anyone know of a reasonably-priced device that
> can be used to implement this?  The requirements are very modest -
> a cheap microcontroller with a few kB of EEPROM and few kB of RAM,
> a reasonably precise real-time clock, and a six-digit seven-segment
> display, all in a package the size of a pack of gum.
> 
> Note that we're not talking about large volumes - I need a few
> hundred, at most.

Is it intentional to avoid Google Authenticator?  (I would consider it
because it's relatively easier to synchronize time and easy to notice
when they are missing but yes, the end user needs an Android or iOS
based smartphone and it's a hassle when they migrate).

Cheers,

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)

iQEcBAEBCAAGBQJQM7FfAAoJEG80Jeu8UPuzguoH+gJBM0jr1CV+2uZ89aEVoR6A
6fjilvIYO/v8X5a6P5Lv6TJ8jZKgFM0lWJW18xP+CDQ9haPNE7CjR3eMaqcrbI3j
3MbvDp3o+TsjhV1Pht5r+vSEEmmFJRq1Bp0YOvzTn20VrxT3+aNAkzc0UyXERV3g
1rtHnt7RAsSbBpH9D8IOP5bilxAdW82Cws68fUnqTU6DjFkVX4JmzBBMiqW7h7Ps
YlO1Os1OytJOuL+bZDnAtnwkUfqHAA3VPp3bu53gDve+YsDXffKpnYZx4FIpsvAn
EJP1oN2bVBFug4g94YtLBUTJGSTOBE0et5gOxkeSutDadgQiwc28ZKx1/dBzTy4=
=BmVW
-----END PGP SIGNATURE-----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5033B15F.3020905>