onetimepass
onetimepass copied to clipboard
Matching Authy
Hello,
I am attempting to convert your module so that it can be used as a substitute for Authy. They've told me via Twitter that they use the same algorithm as GAuth except with a 7-digit response, 256-bit keys/seed and a 10 second interval.
I think I've made the right changes in this branch, but there's been zero testing because doing so essentially requires one of the two things I'm trying to avoid: giving Authy my mobile phone number. The other thing I'm trying to avoid is handing over authentication details to a third party.
Anyway, you might still find it useful, so feel free to poke at it. If I can find a way to test it against what Authy is selling to various places (including CloudFlare) then I'll update later.
Regards, Ben
Thanks for contribution.
Testing is really important, thus I would like to include tests also for Authy, after we (you or me) identify some samples. Maybe they have some example inputs & outputs of the algorithm?
@Hasimir, please take a look at current release - it allows you to override several defaults (such as token length, digest method and interval length). Not best yet, but still gives you all flexibility you need to support Authy tokens (as far as you have secret key etc.).
It would be awesome, though, if you could provide some test values (can be dummy).
Thanks again!
@Hasimir: Please give some feedback on that, provide some testing for it, if you can. I would like to list you as co-author for this library, since you provided useful input on the actual functionality.
Oh, sorry, been tied up with miscellaneous crap elsewhere. I'll see what I can do (though part of the problem is testing matches to authy when you don't want to give them a mobile number). I'm sure some point of comparison can be found, though.
-----BEGIN PGP MESSAGE-----
hQIMAyjC6sDGJKzHAQ/9HNyNviZ497FAmE5JeMM723Nea4qV6ISLIKlMYB/+881H XoxdaETqr0Q9SuvmT2qxxm1Dwyv303I3j3A7dqFEFhN4OQBTAXREsBPmuhv30G1n fRdpZRaIPs9A/hDwUNLAn7yEX/VAfU1+c89z0Im6GWhZ6YOyWrEvzSCMKOKIfWu/ DpGiFCsaCiBlTiK2og6JxWrGLyN4vwiniXmoTlOzF3Ulv4oB5NQSXFYJ0rB2ydzu xbpE+X9Jgkb+K8/VH/08z/MPr8fBn2SFtIlw0rq03MLqfH2gQ3sdzFkLBGINlKxq fiSCeQZWZO7dUoRqZEnjxWurBMnDZECetVwGnao0BSBDAgsoY7S5dk23m+iZUsfp ZIDgMqlisZW2KA2AFB+2ZpDvrNuItJ3w/jkmVN9PAcqfzdPjeU/3+CFjqpVdRKt4 8kB/ybgERrHPxxg9iZUgJoQe+gie33ukEFvLzQiRTlih+ft7hXNT3qibEy3qlh74 JiQQzkqHGNc+md7lUw+z4ip88Vq18TFbunjPMd9rpz8ykiQYnW7pcEPx8Ha2BmTw XFGNgXjFHXhKwWKXiYlCO/7Xk19wacOzMTMkRiP+skUC0vheAUCbo4j/YCxLhHvq xNt6aoHyNr9Xp733jvKZnApFUcCz4t6zcUXPeiFUXidzOgcbe4mPVQWolikyOb6F BA4DyYuqGGLkSE0QD/sFwNCuUf6jo8mztshTv9xwvD83ZDgjzdXZ3hyTz2Q68OkC fRnzf4TbRh+SdIKHrZpXMVlJhm9ID+vY8mVVACO+Xu3+mBXAvqZyzQZEhngVWXlX oN74PEG4sGRu43NqAk4VJnGs/6hCq3vOCY52sZpUgR7Bwg8ySO0j5MI1YzcQjOOZ S1jeF2MI5RqpjMs7/vfvenz71IWR6a+4hGfsuGlHp+Q1qjdNVhRiTe3HPqEWJS/P SMktOJ8cDWnTPJ2gorSx79V2BMD+jm6w/COX7k5ZL4BO1SjXXfUvtWYhZ6Wf0xSv DMfDFHQWRLiqS55soxoU2WD2oDFRLNrx4onCXgeY++tO6sE++Ywdef7BFJl7hNJ+ N3wFL6h7gZYDE9jWq+kKFwSrrdSohevcYBHx3cVykFax3akrzA2/jBk5Z5QHq6Tw 4GHUi2NQb7Jx/nNePOAxknsJbpU5t5nKuAShSca60WzGHEtwC85umASBPOFsDTlE UNVfwEjUAVkEVqRCHJq9VO2/PCg/cG1CnOo1aT4OYOA40o/PxhvoE1A0zgkIUwXd 2FFcQ+Y9IE36O0BWmNm+RerEpm6QQE6zWqDE3gIuK4vexhxNCtsGlJ7w5RF9Q70T AqE39m4zLOyR2Ov0C5vSPU7pC+eqIaqVg21eCjkRY1m2l6X5XxQDkJ7s+8Oszw/+ NjHUmy1AjtqAjrDUENCxDdfjp82jAMh3rgkzewnPUJr4nMFSM266Uw9FiK6u6qQ8 QvbjX0z/WQIxLiQcP58VKrKOqYX0vODLdGmqhmTiqVxO9Oni9SBXQilUgkOKTvev iYe7Ld9FTWJ5ugF2/BbxZrRrd0K0lAqDNNVKC9GMhREe6R2aQYPLqXQ8+qJQkbqF 3lJcdARHnJPzMS5xjdtfNIHq870uVGCf0VZpz9WkQnOW6G9UpBCq6Xmzp7s5QcPA yvTaLoHfsWm2GOkIt6bYR87Q1xUhNFDOYT5hThj/3s7+7BP6L4O3MmTf8TLX5zak eymQNmq6QFD6EdmVItIsriEj/F2GZEoPaFD+ld/Kje1kNKGw6x7thbgaU8XSdvTx R+j3QrUbUF1Fzb9pbxocg+ABtakWYXfO8lc7usoh1Tdmy6EVld5nAcuyjVWDyIYS c2IpM4WiLpiT1ZiqLFAm9wHjdjXw/JtPcAnsVOHK183U37F+AE3vp99yzwbPAjcY GrUh1E7VHFj9j+hsZuURR2PruHx/nFD4WcU/Xk7Do3yM12jKAXgPTEXjRqUNWN6R rtOjsvqPxXRP7z4mInhuFYol/gVJ1B+0I96aSR/W1CnhRbGteCYnzvdDV91XDvF9 pR9D1aDdKGqTORkviG2dxO5cebCw74XWShbQNykDth7S6gEASARz0Y/nrY0B7HFY pv3x2MislnOipiSyzrRhb4wc5wnwe1M7AhpdVZSJNFyT+g9DG0aABdh2LGYvxxt1 W1qUY4ClIbzKlDjtltXKgQwj/2qg5q8TCU2sHAc052O87FzfZTi8h6efaCYbP4rq ORbnSTdQX2/87/1j5CZ2AJUfwsNUsHvlVcXUyq3ScwqsCFeso+boJ6ud0Cyuu4U5 NajasXz6sVUyBNJr4e9xdSV7fh9rQ1FH12cWDCqQ1GQQlB6TvsEk36aUKZAr3iM2 nIGe2rDklhk3hgLV2CRakNLyYJEGN181gNX/wtn2sh6Rf131L/4NGA8oZSd8BV8W aFmMaezqq/QciL9yoDs3bhIXpU49gJRMc891l5ezf+J25ju5PHCX+MBCEQr539Wf Jb2RRFqhm5jnjTNmhYRXVlgFd5RjnPoLzJqLtR3yXGrNcnUg5Gj7C2hgtB65Z54z vKK0RJSoYQQA6YXcBL5oFBQxL267Z1SG8qpGOCPmA/T/nEsUOzO29T2xu36+Ja36 99QhtQ5BCf6duFDrlrKTsn4n1qXkKthIC0chhXsq4oSzPNBd9I1vSanuZrydwJjU EcsOMiEaCHk0lD2p/5oNSWifIQOTe5a09IP4ESdyqi1Ax7fqmvSf9HbjXgr5U/jG KxUzpipF30N8ceZhvyvuqck1gwl3Vh4lAxit2IKf3qCpiJFyPZM+ezNhCMaqu6Nx Kav1FKm2D+kFAPxtIQmbNQ3BgfxAuv/OTvBjG/5HLPF7b49cITHKnMIfKFk83nCt glaCtuEeLiWnBOmFAxlGU3xQUZ8TLuZyiYf9Dsr+sRRPXjQaYg27u5wXWmDChCoI b8cFOsrRu0eHUBLoGtjIzGycOx/4Klfi/6KMOq/gjH2QW+UCbXZeit0jzDqnOxvh aBh8IjhlVMSq4zjr3yLrM4Dlx6NblwGEwIOOhTypnYDPt61fVLpoW3QevAPoZari /g6fjoo/DXMnTpr1PB35bYZtzWqhDZx4GXbjscglyX/rGI8bZu0hIKlUngoyknKl 9ZOsDG84ptfuLL802jh5DiRUcbwG7XaP5fsoiIVmasz9XsY0WC+ErypIljCRGb4V kE3K0FgTBXgn6ODIOeVXVeazpyCdAnhR8Kk0pOiHGG7bUH1e5UUERkB2oSwqpluy Xrw9hdB+UiH/In3QhkTqoOdJsiDJt1y14VqZgdY0VrMMyWE60Ha43yN+TcJHgfec kthw890UEQU7HQ6EEISpuxiDAEUKJx7nd+fZMhLC3SYWpTanVOCes+V/x1eDznj7 TadhJefgQG9GRdJ47FoYnQnyVQUUJtjctYGZLud03UmEYgzW+puI/c7Tae3FE+ED D3sgbXilX9dQf1+9f76ZSPQFlqMxL9zB+wePJO49TEvXA/8= =VYHb -----END PGP MESSAGE-----