This object is in archive! 
Token algorithm
Answered
Hi!
I need help with this algorithm:
- token = SHA1(nonce + SHA1(password))
nonce : binary, hex or string ?
+ : sum? concatenation?
Thanx
Access denied
No connection
Real-time notifications may not work


The same question
nonce is string, you can see it here https://my.zipato.com/zipato-web/api/#!/user/initialize_get_1
+ is concatenation
nonce is string, you can see it here https://my.zipato.com/zipato-web/api/#!/user/initialize_get_1
+ is concatenation
There are many variations of this technology, but the hardware token One-Time Password algorithm is a particularly slick system. It uses an algorithm that updates a counter every time a user requests a HOTP. The updated counter is used to generate a new password, and each user will be given a different, unique value to use as a passcode. The algorithm is based on a secret key, which is passed between the user and an authentication server. The value is then encrypted to produce a unique and tamper-proof string of characters.
There are many variations of this technology, but the hardware token One-Time Password algorithm is a particularly slick system. It uses an algorithm that updates a counter every time a user requests a HOTP. The updated counter is used to generate a new password, and each user will be given a different, unique value to use as a passcode. The algorithm is based on a secret key, which is passed between the user and an authentication server. The value is then encrypted to produce a unique and tamper-proof string of characters.
Replies have been locked on this page!