Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/dlenski/python-motp
Command-line client for generating Mobile-OTP / mOTP codes
https://github.com/dlenski/python-motp
authentication-token mobile-otp motp otp otp-generator
Last synced: about 2 months ago
JSON representation
Command-line client for generating Mobile-OTP / mOTP codes
- Host: GitHub
- URL: https://github.com/dlenski/python-motp
- Owner: dlenski
- License: mit
- Created: 2019-02-04T23:20:02.000Z (almost 6 years ago)
- Default Branch: master
- Last Pushed: 2019-06-26T18:47:58.000Z (over 5 years ago)
- Last Synced: 2024-04-03T08:10:16.957Z (9 months ago)
- Topics: authentication-token, mobile-otp, motp, otp, otp-generator
- Language: Python
- Homepage: http://motp.sourceforge.net
- Size: 2.93 KB
- Stars: 5
- Watchers: 3
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
README
[](https://opensource.org/licenses/MIT)
What is this for?
=================
If you need to generate [one-time passwords](//en.wikipedia.org/wiki/One-time_password)
using the [Mobile-OTP / mOTP algorithm](http://motp.sourceforge.net/), from the command-line,
without futzing around with your phone.
This is a self-proclaimed “standard” algorithm for one-time passwords. It is confusing,
seemingly almost obsolete, and appears to mainly be used in German-speaking countries.
**You don't want to use this unless you are forced to interact with an existing system
that uses such codes for 2FA.**
Mobile apps that appear to support it:
* Swiss SafeLab OTP authenticator for iOS: [on iTunes](https://itunes.apple.com/us/app/otp-authenticator/id915359210?mt=8)
* Swiss SafeLab OTP authenticator for Android: [APK download](https://www.swiss-safelab.com/en-us/products/otpauthenticator.aspx)
* Android app that supports this algorithm: [DroidOTP on Google Play Store](https://play.google.com/store/apps/details?id=net.marinits.android.droidotp&hl=de&rdid=net.marinits.android.droidotp)
How does it work?
=================
The principle of the algorithm is [explained badly](http://motp.sourceforge.net/#1.1)
and [implemented confusingly](http://motp.sourceforge.net/bash/otpverify.sh) but it's very simple: you have a token secret
(an ASCII string, usually hexadecimal or alphanumeric) and a PIN (an
ASCII string, usually 4 digits), and this is converted to a 6-digit
code using:
```
counter = ASCII((UNIX epoch time) / 10s)
digest = MD5HEX(counter || secret || pin)
code = LEFT(digest, 6 characters)
```
That's it. ¯\\\_\(ツ\)\_\/¯
Use it
======
Requires Python **3.x**.
```
$ ./motp.py SECRET PIN
a1b329
```
More verbosely:
```
$ ./motp.py -v SECRET PIN
Epoch time: 1549323786
Counter: 154932378
a1b329 (current)
```
All available options:
```
$ ./motp.py --help
usage: motp.py [-h] [-s SECONDS] [-l LENGTH] [-w WINDOW] [-v] secret pin
positional arguments:
secret mOTP secret value (often hex or alphanumeric digits)
pin mOTP PIN value (usually 4 digits)
optional arguments:
-h, --help show this help message and exit
-s SECONDS, --seconds SECONDS
Duration of mOTP codes in seconds (default 30 seconds)
-l LENGTH, --length LENGTH
Length of mOTP output (default 6 characters)
-w WINDOW, --window WINDOW
Number of counter values before and after current one
to show (for testing time-skew)
-v, --verbose
```
License
=======
[MIT](LICENSE.txt)