|
|
|
|
Home / Computers / Security / Authentication / One Time Passwords
|
|
|
|
Web Sites
|
- Clearview Systems - Suppliers of Secure Computing SafeWord, a scheme based on hardware tokens. Includes rationale for single-use password systems, as well as other network security products.
www.clearview.co.uk
- CRYPTOCard Network Security - Password tokens delivered on key fobs, palm pilots, hardware or software. Security for dial in, access control, internet and web connections. Offers a strong two factor system. Management software. Includes rationale and business case for token-based access.
www.cryptocard.com
- David Baldwin - Author of an Apple Newton OTP (S/Key) calculator. Site includes information about the author, and a link to his FTP site.
tltsu.anu.edu.au/~dgb900
- DynaPass - Provides primary or secondary authentication by regularly distributing passwords (or parts of passwords) through wireless phones. Time locked access.
www.dynapass.com
- IETF One Time Password Authentication Charter - Current specifications for the official internet standard (a continuation of the BellCore S/Key standard). Composition and membership information included.
www.ietf.org/html.charters/otp-charter.html
- JOTP Calculator - A java applet OTP (S/Key) calculator. The applet downloads onto the client machine and calculates locally.
www.cs.umd.edu/users/harry/jotp
- One Time Passwords In Everything (OPIE) - OTP (S/Key) source code, oriented towards unix servers. Provides calculator tools, as well as server FTP, login and su programs. Freely redistributable. Site includes user-contributed software.
inner.net/opie
- OTP/Skey - One Time Password Information - Good list of OTP (S/Key) calculators for normal and unusual platforms. Description of S/Key tools usage on unix systems.
www.scs.carleton.ca/skey
- OTPC 9000 - An OTP (S/Key) calculator for Nokia 9000 cellular phones. Includes S/Key information and resources.
www.basun.net/software/otpc
- otpCalc - An OTP (S/Key) calculator for X (X-Windows). Supports MD4, MD5, SHA1, and RIPEMD-160 message digests. Site includes screenshots.
original.killa.net/infosec/otpCalc
- PalmKey - OTP (S/Key) calculator for palm pilots. Site includes information about both source and binary distributions.
palmkey.sourceforge.net
- pilOTP - OTP (S/Key) client for the Palm platform. Includes screen captures, and general information as well as software downloads.
astro.uchicago.edu/home/web/valdes/pilot/pilOTP
- PyOTP - A simple Python library, currently under development, to generate OTP (S/Key) responses. RFC-2289 compliant. Includes links to development and release information.
pyotp.sourceforge.net
- RFC2289 - A One-Time Password System - The current internet standard, as descended from the original S/Key specification.
www.faqs.org/rfcs/rfc2289.html
- S/Key Introduction - A technical description of the S/Key algorithm.
www.surfnet.nl/innovatie/surf-ace/security/doc/skey.html
- SkeyCalc - OTP (S/Key) calculator for MacOS X, MacOS X Server and NEXTSTEP. RFC-2289 compliant. Site includes software downloads, documentation and an introduction to the technology.
www.orange-carb.org/SkeyCalc
- The S/KEY One-Time Password System - Scholarly paper by Neil Haller on the original S/Key system. Links to many citations from the original paper.
citeseer.nj.nec.com/34338.html
- Vulnerabilities in S/KEY - A good discussion of those problems that OTP schemes can't solve. Applicable to many OTP schemes, not just S/Key.
www.indy.net/~sabronet/secure/skeyflaws.html
|
|
|
|
|