full-disclosure - One-Time Pad Authentication

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.58.0311301736240.3843@catbert.rellim.com>
From: gem at rellim.com (Gary E. Miller)
Subject: One-Time Pad Authentication

Yo Jonathan!

On Sun, 30 Nov 2003, Jonathan A. Zdziarski wrote:

> I'm interested in coding a one-time pad authentication system; similar
> to SecurID or other types of token authentication only with software
> tokens.

No need to reinvent that wheel.  Check out RFC 2289/ STD 61.  Not many
RFCs make it to standard status and this one did:

	ftp://ftp.rfc-editor.org/in-notes/std/std61.txt

You can get the Bellcore reference implementation here:
	ftp://thumper.bellcore.com/pub/nmh/

PAM-s/key here:
	http://www.srce.hr/~kreator/projects/tarballs/

It is even available on PalmOS:
	http://gnukeyring.sourceforge.net/

Lots more to be found with a little googling.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701
	gem@...lim.com  Tel:+1(541)382-8588 Fax: +1(541)382-8676