[OATH-toolkit-help] OATH Toolkit 1.4.0

[Simon Josefsson]

This release has TOTP generation support in liboath and oathtool and
callback-based HOTP validation (for Daniel's hashed OTP validation).  I
wanted to complete TOTP support in pam_oath and TOTP validation before
releasing this, but I never found time so I thought it would be better
to just get this it out first.  Comments and feedback very welcome!

New in this release:

** liboath: Added pkg-config script.

** liboath: Support time-variant TOTP based on draft-mraihi-totp-timebased-07.
New function oath_totp_generate.  New symbols
OATH_TOTP_DEFAULT_TIME_STEP_SIZE and OATH_TOTP_DEFAULT_START_TIME for
default system parameters.

** liboath: New API oath_hotp_validate_callback().
Used when you are validating hashed OTPs.  Inspired by discussions
with Daniel Pocock <address@hidden>.

** oathtool: New parameter --totp to generate time-variant TOTP's.
New sub-parameter --time-step-size, --start-time and --now used to
specify TOTP configuration.

** liboath: Added self-tests of validate functions.

The OATH Toolkit attempts to collect several tools that are useful when
deploying technologies related to OATH.  For example, see RFC 4226 on
OATH HOTP.  The components included in the package is:

   * liboath: A shared and static C library for OATH handling.

   * oathtool: A command line tool for generating and validating OTPs.

   * pam_oath: A PAM module for pluggable login authentication for OATH.

Consider this release experimental!  Please report any issues with it,
especially with the shared library.

The project's web page is available at:
  http://www.nongnu.org/oath-toolkit/

GTK-DOC API Reference manual:
  http://www.nongnu.org/oath-toolkit/reference/liboath-oath.html

Manual for PAM module:
  http://git.savannah.gnu.org/cgit/oath-toolkit.git/tree/pam_oath/README

If you need help to use the OATH Toolkit, or want to help others, you
are invited to join our oath-toolkit-help mailing list, see:
  http://lists.nongnu.org/mailman/listinfo/oath-toolkit-help

Here are the compressed sources of the entire package:
  
http://download.savannah.nongnu.org/releases/oath-toolkit/oath-toolkit-1.4.0.tar.gz
 (1.4MB)
  
http://download.savannah.nongnu.org/releases/oath-toolkit/oath-toolkit-1.4.0.tar.gz.sig
 (OpenPGP)

The software is cryptographically signed by the author using an OpenPGP
key identified by the following information:

pub   1280R/B565716F 2002-05-05 [expires: 2011-03-30]
      Key fingerprint = 0424 D4EE 81A0 E3D1 19C6  F835 EDA2 1E94 B565 716F
uid                  Simon Josefsson <address@hidden>
uid                  Simon Josefsson <address@hidden>
sub   1280R/4D5D40AE 2002-05-05 [expires: 2011-03-30]

The key is available from:
  http://josefsson.org/key.txt
  dns:b565716f.josefsson.org?TYPE=CERT

Here are the SHA-1 and SHA-224 checksums:

8a64fc1ffcec7e7a76b356ddb00edf053aa25a4e  oath-toolkit-1.4.0.tar.gz

9f1a21ef98fb83360df4607194241eafbd0adb696357aacbba877586  
oath-toolkit-1.4.0.tar.gz

Savannah developer's home page:
  https://savannah.nongnu.org/projects/oath-toolkit/

Code coverage charts:
  http://www.nongnu.org/oath-toolkit/coverage/

Happy hacking,
Simon

pgpetCDQtUz4u.pgp
Description: PGP signature