Sat, 13 Jul 2013 09:33:12 +0200
Update to new JQuery core version and correct missing mouse/touch events.
michael@4 | 1 | <!DOCTYPE html> |
michael@4 | 2 | <!-- |
michael@4 | 3 | OTPWCalc - One time password challenge response calculator client |
michael@4 | 4 | Copyright © 2013 Michael Schloh von Bennewitz <michael@schloh.com> |
michael@4 | 5 | |
michael@4 | 6 | OTPWCalc is free software: you can redistribute it and/or modify |
michael@4 | 7 | it under the terms of the European Union Public Licence, either |
michael@4 | 8 | version 1.1 of the license, or (at your option) any later version. |
michael@4 | 9 | |
michael@4 | 10 | OTPWCalc is distributed in the hope that it will be useful, |
michael@4 | 11 | but WITHOUT ANY WARRANTY; without even the implied warranty |
michael@4 | 12 | of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See |
michael@4 | 13 | the European Union Public License for more details. |
michael@4 | 14 | |
michael@4 | 15 | You should have received a copy of the European Union Public |
michael@4 | 16 | Licence along with OTPWCalc. If not, please refer to |
michael@4 | 17 | <http://joinup.ec.europa.eu/software/page/eupl/>. |
michael@4 | 18 | |
michael@4 | 19 | This file is part of project OTWPCalc, a one time password challenge |
michael@4 | 20 | response calculator client and is found at http://otpwcalc.europalab.com/ |
michael@4 | 21 | |
michael@4 | 22 | hman.html: W3C HTML implementation |
michael@4 | 23 | --> |
michael@4 | 24 | |
michael@4 | 25 | <html> |
michael@4 | 26 | <head> |
michael@4 | 27 | <meta charset="utf-8"> |
michael@4 | 28 | <meta name="viewport" content="width=device-width, initial-scale=1"> |
michael@4 | 29 | <title>OTPWCalc</title> |
michael@4 | 30 | <link rel="stylesheet" href="../jquery.mobile/jquery.mobile-1.3.1.min.css" /> |
michael@4 | 31 | <link rel="stylesheet" href="../main.css" /> |
michael@11 | 32 | <script src="../jquery.core/jquery-1.10.2.min.js"></script> |
michael@4 | 33 | <script src="help.js"></script> |
michael@4 | 34 | <script src="../jquery.mobile/jquery.mobile-1.3.1.min.js"></script> |
michael@4 | 35 | </head> |
michael@4 | 36 | <body> |
michael@4 | 37 | <!-- Data attributes reserved by JQuery Mobile: |
michael@4 | 38 | data-theme, data-ajax, data-filter, data-icon, data-grid, |
michael@4 | 39 | data-rel, data-icon, data-url, data-role, and data-type --> |
michael@4 | 40 | <!-- Also data-dom-cache="true" --> |
michael@4 | 41 | <div data-role="page" class="type-interior oc-swipage" id="manpage"> |
michael@4 | 42 | <div data-role="header" data-position="fixed" data-id="headman"> |
michael@4 | 43 | <h1>OTPWCalc</h1> |
michael@4 | 44 | </div><!-- /header --> |
michael@4 | 45 | <div data-role="content"> |
michael@4 | 46 | <div style="float: left;">User Commands</div> |
michael@4 | 47 | <div style="float: right;">OTPWCalc(1)</div> |
michael@4 | 48 | <div style="clear: both;"></div> |
michael@4 | 49 | <div style="margin-top: 1.5em; text-transform: uppercase; font-size: 0.75em;">Name</div> |
michael@4 | 50 | <div style="margin-left: 2em; font-size: 0.75em;">OTPWCalc - Client application for calculating responses to OTP challenges.</div> |
michael@4 | 51 | <div style="margin-top: 1.5em; text-transform: uppercase; font-size: 0.75em;">Synopsis</div> |
michael@4 | 52 | <div style="margin-left: 2em; font-size: 0.75em;">OTPWCalc [-h] [-v] [-V]</div> |
michael@4 | 53 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Description</div> |
michael@4 | 54 | <div style="margin-left: 2em; font-size: 0.75em;">Playing the role of a hardware |
michael@4 | 55 | token in a client server authentication system as described |
michael@4 | 56 | in RFC 2289, OTPWCalc calculates responses to incoming |
michael@4 | 57 | authentication challenges as typed in by the user.</div> |
michael@4 | 58 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Options</div> |
michael@4 | 59 | <div style="margin-left: 2em; font-size: 0.75em;"> |
michael@4 | 60 | -h Display a brief help message and exit.<br /> |
michael@4 | 61 | -v Print verbose text to the calling terminal.<br /> |
michael@4 | 62 | -V Print the version number and exit. |
michael@4 | 63 | </div> |
michael@4 | 64 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Terms</div> |
michael@4 | 65 | <div style="margin-left: 2em; font-size: 0.75em;">Username</div> |
michael@4 | 66 | <div style="margin-left: 4em; font-size: 0.75em;"> |
michael@4 | 67 | The name that the server knows. For example, 'albertc'. |
michael@4 | 68 | </div> |
michael@4 | 69 | <div style="margin-left: 2em; font-size: 0.75em;">Secret</div> |
michael@4 | 70 | <div style="margin-left: 4em; font-size: 0.75em;"> |
michael@4 | 71 | A password, usually selected by the user, that is |
michael@4 | 72 | needed to gain access to the server. For example, |
michael@4 | 73 | 'Mysec2-pw'. |
michael@4 | 74 | </div> |
michael@4 | 75 | <div style="margin-left: 2em; font-size: 0.75em;">Challenge</div> |
michael@4 | 76 | <div style="margin-left: 4em; font-size: 0.75em;"> |
michael@4 | 77 | Information printed by the server when it tries to |
michael@4 | 78 | authenticate a user. This information is needed by |
michael@4 | 79 | OTPWCalc to generate a proper response. For example, |
michael@4 | 80 | 'otp-md5 820 dinw23612'. |
michael@4 | 81 | </div> |
michael@4 | 82 | <div style="margin-left: 2em; font-size: 0.75em;">Response</div> |
michael@4 | 83 | <div style="margin-left: 4em; font-size: 0.75em;"> |
michael@4 | 84 | Information generated from a challenge that is used |
michael@4 | 85 | by the server to authenticate the user. For example, |
michael@4 | 86 | 'BIEM ROSE JINX HARD BALL SKY NEW'. |
michael@4 | 87 | </div> |
michael@4 | 88 | <div style="margin-left: 2em; font-size: 0.75em;">Seed</div> |
michael@4 | 89 | <div style="margin-left: 4em; font-size: 0.75em;"> |
michael@4 | 90 | Information used in conjunction with the secret and |
michael@4 | 91 | sequence number to compute the response. It allows |
michael@4 | 92 | the same secret to be used for multiple sequences |
michael@4 | 93 | by changing the seed, or for authentication to |
michael@4 | 94 | multiple servers by using different seeds. |
michael@4 | 95 | </div> |
michael@4 | 96 | <div style="margin-left: 2em; font-size: 0.75em;">Sequence #</div> |
michael@4 | 97 | <div style="margin-left: 4em; font-size: 0.75em;"> |
michael@4 | 98 | A counter used to track key iterations. Each time |
michael@4 | 99 | a successful response is received by the server the |
michael@4 | 100 | sequence number is decremented. For example, 71. |
michael@4 | 101 | </div> |
michael@4 | 102 | <div style="margin-left: 2em; font-size: 0.75em;">Hash ID</div> |
michael@4 | 103 | <div style="margin-left: 4em; font-size: 0.75em;"> |
michael@4 | 104 | Text that identifies the cryptographical algorithm |
michael@4 | 105 | used. The valid hash identifiers are 'otpmd4' |
michael@4 | 106 | corresponding to MD4, and 'otp-md5' corresponding |
michael@4 | 107 | to MD5. |
michael@4 | 108 | </div> |
michael@4 | 109 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Files</div> |
michael@4 | 110 | <div style="margin-left: 2em; font-size: 0.75em;"> |
michael@4 | 111 | The application may store a cookie in a file used to |
michael@4 | 112 | restore the most recent settings. The location of this |
michael@4 | 113 | file (or arbitrary data structure) varies according to |
michael@4 | 114 | the operating system. |
michael@4 | 115 | </div> |
michael@4 | 116 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Bugs</div> |
michael@4 | 117 | <div style="margin-left: 2em; font-size: 0.75em;">This manual.</div> |
michael@4 | 118 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Security</div> |
michael@4 | 119 | <div style="margin-left: 2em; font-size: 0.75em;"> |
michael@4 | 120 | All of the authentication strategies covered in the |
michael@4 | 121 | standards implemented by this application are vulnerable |
michael@4 | 122 | to man in the middle (MITM) attacks. The strategies can |
michael@4 | 123 | be combined with public key logic to defeat such attacks. |
michael@4 | 124 | </div> |
michael@4 | 125 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Standards</div> |
michael@4 | 126 | <div style="margin-left: 2em; font-size: 0.75em;"> |
michael@4 | 127 | The IETF standards RFC 1760 (The S/KEY One-Time Password |
michael@4 | 128 | System) and RFC 2289 (A One-Time Password System) are |
michael@4 | 129 | implemented. |
michael@4 | 130 | </div> |
michael@4 | 131 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">See also</div> |
michael@4 | 132 | <div style="margin-left: 2em; font-size: 0.75em;"> |
michael@4 | 133 | None. This is a self contained, stand alone application with |
michael@4 | 134 | no alias commands. It is unique in that it leverages open |
michael@4 | 135 | technologies like Javascript to run unmodified on a variety |
michael@4 | 136 | of operating systems. |
michael@4 | 137 | </div> |
michael@4 | 138 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Author</div> |
michael@4 | 139 | <div style="margin-left: 2em; font-size: 0.75em;"> |
michael@4 | 140 | This application was written by <a href="//michael.schloh.com/"> |
michael@4 | 141 | Michael Schloh von Bennewitz</a>. |
michael@4 | 142 | </div> |
michael@4 | 143 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Contact</div> |
michael@4 | 144 | <div style="margin-left: 2em; font-size: 0.75em;"> |
michael@4 | 145 | Please refer to the <a href="//otpwcalc.europalab.com/"> |
michael@4 | 146 | OTPWCalc homepage</a> for contact information. |
michael@4 | 147 | </div> |
michael@4 | 148 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Support</div> |
michael@4 | 149 | <div style="margin-left: 2em; font-size: 0.75em;"> |
michael@4 | 150 | The <a href="//list.europalab.com/mailman/listinfo/otpwcalc/"> |
michael@4 | 151 | OTPWCalc mailing list</a> provides information and answers to |
michael@4 | 152 | questions. Commercial support is provided by the |
michael@4 | 153 | <a href="mailto:michael@schloh.com">author</a>. |
michael@4 | 154 | </div> |
michael@4 | 155 | </div><!-- /content --> |
michael@4 | 156 | </div><!-- /page --> |
michael@4 | 157 | </body> |
michael@4 | 158 | </html> |