Re: SHA384

[Sergey Yudin]

Simon, thank you very much for your answer! I mean TOTP and oathtool. We've got QR-code for our new logins which looks like this:

QR-Code:otpauth://totp/username:someuuid?issuer=username&secret=LONGBASE32KEY&digits=6&algorithm=SHA384&period=30

oathtool --totp=SHA384 -d 6 -s 30 -b "BASE32KEY..." gives wrong code. I thought SHA384 just ignored

Regards...

On Tue, Sep 5, 2023 at 11:21 AM Simon Josefsson <simon@josefsson.org> wrote:

Sergey Yudin <beremour@gmail.com> writes:

> We faced new login case which requires SHA384 algo. Temporary workaround is
> to use RedHat's FreeOTP which supports it. Is it possible to add SHA384 ?

Can you point to a specification or product specification?  Do you mean
HOTP or TOTP?  Support for it in liboath, oathtool, pam_oath, libpskc,
and/or pskctool?  What kind of support?

/Simon

--

Regards..