From owner-freebsd-security@FreeBSD.ORG Fri Aug 24 08:23:18 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A1FA3106564A for ; Fri, 24 Aug 2012 08:23:18 +0000 (UTC) (envelope-from simon@qxnitro.org) Received: from mail-iy0-f182.google.com (mail-iy0-f182.google.com [209.85.210.182]) by mx1.freebsd.org (Postfix) with ESMTP id 5540E8FC14 for ; Fri, 24 Aug 2012 08:23:17 +0000 (UTC) Received: by ialo14 with SMTP id o14so3679556ial.13 for ; Fri, 24 Aug 2012 01:23:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qxnitro.org; s=google; h=mime-version:sender:x-originating-ip:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=hSMFO0VGP35aVacVzgg9kgxO8YT2MigCIsL7OZ1A6D8=; b=nCrl1dCykCrT8vwv2Wrcx+EHmdbQ0L8SbdJEEwssq1IM/DRrcutKILmrAmZ+9l/dYn o49SfBFDJHcgGDoErFZKsGbOAtIzjVoaCSLhSVP2hcoFgff2uTeKeGsPxqKoVldzha3/ 0omRpxpEIGVy5L7S9/i0txX4b+Z3dRiqB+9o0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:sender:x-originating-ip:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding:x-gm-message-state; bh=hSMFO0VGP35aVacVzgg9kgxO8YT2MigCIsL7OZ1A6D8=; b=RQxEwGz4VgeWy8c+Wpfgfo0JiopoDr60/DiJPAkYMJI1E7p1oRkxWHJqXxJWlu+JKL aZ0e8tHFW5dL6YDSB3xXF7plMRKdPWU6hrMd4tEOlaIpbTwFUyl5hAe7yZmCgCedX9qK 2tmIzpaTi85CDGnWg4uUTSC6AWXpJgY2M+JVRIblRQOxXkqxNGVoJ4dHHULmFi6MMmAV uzQXQZpJbe3cHrYa6HVCbxLBkMcUBLoIDwnIj623K6rWexQ0q1eMoX9A9sZqm746Qgo6 LDJWhFFnL1SAWVwN+qqy892FgvymG4ymlm9S5pKrEYAwfoSVBIlyVDocc3tz3wwr1uMG bJSw== MIME-Version: 1.0 Received: by 10.50.87.227 with SMTP id bb3mr1194126igb.57.1345796597329; Fri, 24 Aug 2012 01:23:17 -0700 (PDT) Sender: simon@qxnitro.org Received: by 10.64.102.104 with HTTP; Fri, 24 Aug 2012 01:23:17 -0700 (PDT) X-Originating-IP: [2620:0:1040:201:9db5:5be0:5543:2221] In-Reply-To: <86393gpdrp.fsf@ds4.des.no> References: <86393gpdrp.fsf@ds4.des.no> Date: Fri, 24 Aug 2012 09:23:17 +0100 X-Google-Sender-Auth: PTKlpDIy7WOR3ljOcXPTSRCoc2U Message-ID: From: "Simon L. B. Nielsen" To: =?UTF-8?Q?Dag=2DErling_Sm=C3=B8rgrav?= Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Gm-Message-State: ALoCoQm5jtM/W9gjngCI6ZOwboryNH1odl+f3+NfcRL42SjNyAcDtjEE2wE/39y2Zy3iZgGHNLBR Cc: freebsd-security@freebsd.org Subject: Re: Hardware TOTP tokens X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Aug 2012 08:23:18 -0000 On Tue, Aug 21, 2012 at 2:37 PM, Dag-Erling Sm=C3=B8rgrav wrot= e: > I'm looking for *rekeyable* TOTP (RFC 6238) tokens - preferably, but not > necessarily OATH-certified. Does anyone know where I can find something > like that? The Aladdin eToken PASS is a very simple one, though I haven't been able to find docs on how your initialize or administer them. http://www.safenet-inc.com/products/data-protection/two-factor-authenticati= on/etoken-pass/ They are sort of programable too if you really want: https://www.youtube.com/watch?v=3DQiTNlSgk-xY :-) --=20 Simon L. B. Nielsen