[Home]   [TOC]

Study_Security_OpenAuthentication  
Open Authentication
Security, OTP, Password
Updated Jan 10, 2015 by jht5...@gmail.com

一、OTP

OTP即 One-Time Password。是目前广泛使用的2阶段密码验证技术,如 2-step verification
使用如下所示:

输入如下显示的6位数字:

二、规范

http://www.openauthentication.org/specification

  • HOTP 【 An HMAC-Based OTP Algorithm (RFC 4226) 】
TXT HTML PDF
  • TOTP【 Time-based One-time Password Algorithm (RFC 6238) 】
TXT HTML PDF
  • OCRA 【 OATH Challenge/Response Algorithms Specification (RFC 6287) 】
TXT HTML PDF

三、实现

  • Google Authenticator
http://code.google.com/p/google-authenticator/
  • Hatter's Go Lang Implement
https://code.google.com/p/hatter-source-code/source/browse/trunk/golang/googleauth/googleauth.go

四、其它OTP