Re: OPIE

Daniel Hulme <[email protected]>
Newsgroups gmane.comp.security.linux
Organization :00
Message-ID <[email protected]>
> > I'v been looking around a lot now, after opie (one time password in
> > everything) related stuff. The orginal dev site was lokated at
> > http://inner.net/opie/ but it seams like that link is dead.
> > I know the opie project stalled in 1998 some times but some BSD
> > people made a rewrite in 1999 but i cant find that eighter.
> > Soo what is happening to all the otp/opie stuff? Does nobody use it
> > anymore? Does anybody have some updated info about this, or know
> > about anything else that can give me an otp login.

> IIRC there is something similar on Linux but I don't recall if it is
> OPIE or some other acronym as it has been a while since I looked into
> this.

Perhaps you are thinking of Markus Kuhn's OTPW?
http://www.cl.cam.ac.uk/~mgk25/otpw.html
"OTPW is not compatible with and is not derived from either S/KEY or
OPIE. It is a completely independent and different design, which I
believe fulfils my functional and security requirements better."
It prints you a page of one-time passes. These are independent of
one-another and chosen in random order. To protect against theft of the
sheet, it also uses a constant (memorised) password. An attacker has to
both steal the sheet and eavesdrop the password to break the scheme.

-- 
"The  rules  of  programming  are  transitory;  only  Tao  is  eternal. 
 Therefore you  must contemplate Tao before you receive  enlightenment."
"How will I know when I have received enlightenment?"  asked the novice.
"Your program will then run correctly," replied the master.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.