Authenticator icon indicating copy to clipboard operation
Authenticator copied to clipboard

Published 20 hours ago • verified publisher icon Authenticator-Extension

OCR with digests other than SHA-1 doesn't work

Open koerue opened this issue 1 year ago • 2 comments

Describe the issue

When scanning an QR code made with the SHA-256 or SHA-512 digest, the App doesn't respond incorrect OTP's. However OCR scanning SHA-1 hashed QR's returns valid OTP's. You can reproduce the error here: https://www.token2.com/shop/page/token2-totp-toolset-sha256-version (offers SHA-1 also)

When adding the (e.g.SHA-256) secret manually to the extension, this issue doesn't appear.

Browser

Firefox

Browser Version

102.14.0esr

Extension Version

6.3.5

koerue avatar Aug 02 '23 20:08 koerue

Hi,

I can confirm. Any news on this issue?

Best

R13e avatar Sep 26 '23 07:09 R13e

Hmmm, because the extension only knows SHA256 but not sha256, I will create a PR later.

https://github.com/Authenticator-Extension/Authenticator/blob/dev/src/models/otp.ts#L22

Sneezry avatar Sep 26 '23 15:09 Sneezry