Summary of Time-based OTP with Arduino
This article describes a project by Jose Damico to build a simple, OATH-compliant Time-Based One-Time Password (TOTP) device using open-source tools. The core hardware consists of an Arduino board paired with a small LCD screen. On the software side, the implementation utilizes the SHA-1 library from Cryptosuite for cryptographic functions. This device is intended for demonstration at the upcoming "13th Fórum Internacional Software Livre" in Porto Alegre, Brazil.
Parts used in the TOTP Device:
- Arduino board
- Small LCD screen
- Cryptosuite SHA-1 library
One-time-password (OTP) and its time-based version (time-based OTP, or simply TOTP) are commodity solutions to provide a second factor, in addition to simple passwords, for authentication.
Here Jose Damico proposes his way to implement a simple TOTP device using only open-source tools. The core of the project is an Arduino board connected to a small LCD. From the software perspective, the SHA-1 library comes from Cryptosuite, a cryptographic library for Arduino.
The device, which is OATH-compliant, will be presented soon to the “13th Fórum Internacional Software Livre“, that will be held in Porto Alegre, Brazil, in next July 25-28.
For more detail: Time-based OTP with Arduino
- What is the purpose of this project?
The project provides a second factor for authentication in addition to simple passwords. - How is the device implemented?
It uses only open-source tools with an Arduino board connected to a small LCD. - Which library provides the SHA-1 functionality?
The SHA-1 library comes from Cryptosuite, a cryptographic library for Arduino. - Is the device compliant with any standards?
Yes, the device is OATH-compliant. - Where will the device be presented?
It will be shown at the 13th Fórum Internacional Software Livre in Porto Alegre, Brazil. - When will the event take place?
The event is scheduled for July 25-28 next year. - Who proposed this implementation method?
José Damico proposed his way to implement this simple TOTP device. - Does this solution replace simple passwords?
No, it serves as a second factor in addition to simple passwords.
