Replying to Avatar Loki

Fun Fact:

Standard TOTP (Google Authenticator et al) uses SHA-1 on the concatenation of the OTP secret and datestamp then trims the output to give you 6 digits.

# SHA-1

https://duo.com/decipher/sha-1-fully-and-practically-broken-by-new-collision

Avatar
jimbocoin 🃏 2y ago

Yeesh

Reply to this note

Please Login to reply.

Discussion

No replies yet.