"Ivan Grover" <[EMAIL PROTECTED]> writes: > Iam trying to choose OPIE as my OTP implementation for authenticating the > clients. I have the following queries, could anyone please let me know these > -- why does the challenge in OPIE are in predetermined form.. > is it for determining the decryption key for the encrypted passphrase(stored > in opiekeys).
There is no encryption involved; OPIE is based on a one-way hash function (usually MD5). I'm not sure what you mean by "predetermined form", but one of the features of OPIE is that you should be able to use it even when you don't have a key calculator, by pre-generating and printing a list of responses. > -- is it possible to generate random challenges using opiechallenge No. There is a random seed, but it remains the same until you either run out of keys or generate a new series. > Any pointers/links will be very much helpful. The opie(4) man page describes the algorithm. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[EMAIL PROTECTED]"
