L 0 K 1 on Nostr: Fun Fact: Standard TOTP (Google Authenticator et al) uses SHA-1 on the concatenation ...
Published at
2023-08-30 09:41:20Event JSON
{
"id": "ca8b5280514f2dab99689092eee77257b54c4c184f85f7945b9d35e32547e87b",
"pubkey": "3628e6a5764cacab310474c9f9c588657989c74b5ef0718c7e6e0e53a2a1f773",
"created_at": 1693388480,
"kind": 1,
"tags": [
[
"client",
"coracle"
]
],
"content": "Fun Fact:\n\nStandard TOTP (Google Authenticator et al) uses SHA-1 on the concatenation of the OTP secret and datestamp then trims the output to give you 6 digits.\n\n# SHA-1\n\nhttps://duo.com/decipher/sha-1-fully-and-practically-broken-by-new-collision",
"sig": "91dbdb8a56517d6f15b0dca3f09cb907c0195174f9f977133812c63a12801922854e6efcd5d8015a5e19317256aa7dc65adc9b0111722e37694b18dcdad14eb5"
}