This object is in archive! 

Token algorithm

Phidyos shared this question 12 years ago
Answered

Hi!

I need help with this algorithm:

  1. token = SHA1(nonce + SHA1(password))

nonce : binary, hex or string ?


+ : sum? concatenation?


Thanx

Replies (2)

photo
2

nonce is string, you can see it here https://my.zipato.com/zipato-web/api/#!/user/initialize_get_1

+ is concatenation

photo
1

There are many variations of this technology, but the hardware token One-Time Password algorithm is a particularly slick system. It uses an algorithm that updates a counter every time a user requests a HOTP. The updated counter is used to generate a new password, and each user will be given a different, unique value to use as a passcode. The algorithm is based on a secret key, which is passed between the user and an authentication server. The value is then encrypted to produce a unique and tamper-proof string of characters.

Replies have been locked on this page!

Access denied