| Yubico Forum https://forum.yubico.com/ |
|
| [QUESTION]Is there any way to make the OTP predictable? https://forum.yubico.com/viewtopic.php?f=16&t=1076 |
Page 1 of 1 |
| Author: | charliem [ Sat Jun 01, 2013 10:46 am ] |
| Post subject: | [QUESTION]Is there any way to make the OTP predictable? |
Hi All, I know this might sound like it reduces the security of the YubiKey somewhat. But is there a way to configure it so that if you know the key added to the Yubikey during personalisation you can predict the exact OTP's it will generate? i.e. is there are way to disable the session counter and timing elements of the OTP? So if Alice setups a Yubikey and sends its to Bob. She will know the string generated each time Bob presses the button. I have a use case in mind that relies on knowing the sequence that will be generated, rather than validating the OTPs in the traditional way. Thanks, Charlie M |
|
| Author: | mtassinari [ Thu Jun 06, 2013 2:26 pm ] |
| Post subject: | Re: [QUESTION]Is there any way to make the OTP predictable? |
You could set it up to use a static password, couldn't you? |
|
| Author: | Tom [ Tue Jun 11, 2013 7:40 am ] |
| Post subject: | Re: [QUESTION]Is there any way to make the OTP predictable? |
Read Chapter 6 http://www.yubico.com/wp-content/upload ... l-v3_1.pdf With an end-user Yubikey is not doable. |
|
| Page 1 of 1 | All times are UTC + 1 hour |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|