|
1 <!DOCTYPE html> |
|
2 <!-- |
|
3 OTPWCalc - One time password challenge response calculator client |
|
4 Copyright © 2013 Michael Schloh von Bennewitz <michael@schloh.com> |
|
5 |
|
6 OTPWCalc is free software: you can redistribute it and/or modify |
|
7 it under the terms of the European Union Public Licence, either |
|
8 version 1.1 of the license, or (at your option) any later version. |
|
9 |
|
10 OTPWCalc is distributed in the hope that it will be useful, |
|
11 but WITHOUT ANY WARRANTY; without even the implied warranty |
|
12 of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See |
|
13 the European Union Public License for more details. |
|
14 |
|
15 You should have received a copy of the European Union Public |
|
16 Licence along with OTPWCalc. If not, please refer to |
|
17 <http://joinup.ec.europa.eu/software/page/eupl/>. |
|
18 |
|
19 This file is part of project OTWPCalc, a one time password challenge |
|
20 response calculator client and is found at http://otpwcalc.europalab.com/ |
|
21 |
|
22 hman.html: W3C HTML implementation |
|
23 --> |
|
24 |
|
25 <html> |
|
26 <head> |
|
27 <meta charset="utf-8"> |
|
28 <meta name="viewport" content="width=device-width, initial-scale=1"> |
|
29 <title>OTPWCalc</title> |
|
30 <link rel="stylesheet" href="../css/jquery.mobile-1.3.2.min.css" /> |
|
31 <link rel="stylesheet" href="../main.css" /> |
|
32 <script src="../js/jquery-2.0.0.min.js"></script> |
|
33 <script src="help.js"></script> |
|
34 <script src="../js/jquery.mobile-1.3.2.min.js"></script> |
|
35 </head> |
|
36 <body> |
|
37 <!-- Data attributes reserved by JQuery Mobile: |
|
38 data-theme, data-ajax, data-filter, data-icon, data-grid, |
|
39 data-rel, data-icon, data-url, data-role, and data-type --> |
|
40 <!-- Also data-dom-cache="true" --> |
|
41 <div data-role="page" class="type-interior oc-swipage" id="manpage"> |
|
42 <div data-role="header" data-position="fixed" data-id="headman"> |
|
43 <h1>OTPWCalc</h1> |
|
44 </div><!-- /header --> |
|
45 <div data-role="content"> |
|
46 <div style="float: left;">User Commands</div> |
|
47 <div style="float: right;">OTPWCalc(1)</div> |
|
48 <div style="clear: both;"></div> |
|
49 <div style="margin-top: 1.5em; text-transform: uppercase; font-size: 0.75em;">Name</div> |
|
50 <div style="margin-left: 2em; font-size: 0.75em;">OTPWCalc - Client application for calculating responses to OTP challenges.</div> |
|
51 <div style="margin-top: 1.5em; text-transform: uppercase; font-size: 0.75em;">Synopsis</div> |
|
52 <div style="margin-left: 2em; font-size: 0.75em;">OTPWCalc [-h] [-v] [-V]</div> |
|
53 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Description</div> |
|
54 <div style="margin-left: 2em; font-size: 0.75em;">Playing the role of a hardware |
|
55 token in a client server authentication system as described |
|
56 in RFC 2289, OTPWCalc calculates responses to incoming |
|
57 authentication challenges as typed in by the user.</div> |
|
58 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Options</div> |
|
59 <div style="margin-left: 2em; font-size: 0.75em;"> |
|
60 -h Display a brief help message and exit.<br /> |
|
61 -v Print verbose text to the calling terminal.<br /> |
|
62 -V Print the version number and exit. |
|
63 </div> |
|
64 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Terms</div> |
|
65 <div style="margin-left: 2em; font-size: 0.75em;">Username</div> |
|
66 <div style="margin-left: 4em; font-size: 0.75em;"> |
|
67 The name that the server knows. For example, 'albertc'. |
|
68 </div> |
|
69 <div style="margin-left: 2em; font-size: 0.75em;">Secret</div> |
|
70 <div style="margin-left: 4em; font-size: 0.75em;"> |
|
71 A password, usually selected by the user, that is |
|
72 needed to gain access to the server. For example, |
|
73 'Mysec2-pw'. |
|
74 </div> |
|
75 <div style="margin-left: 2em; font-size: 0.75em;">Challenge</div> |
|
76 <div style="margin-left: 4em; font-size: 0.75em;"> |
|
77 Information printed by the server when it tries to |
|
78 authenticate a user. This information is needed by |
|
79 OTPWCalc to generate a proper response. For example, |
|
80 'otp-md5 820 dinw23612'. |
|
81 </div> |
|
82 <div style="margin-left: 2em; font-size: 0.75em;">Response</div> |
|
83 <div style="margin-left: 4em; font-size: 0.75em;"> |
|
84 Information generated from a challenge that is used |
|
85 by the server to authenticate the user. For example, |
|
86 'BIEM ROSE JINX HARD BALL SKY NEW'. |
|
87 </div> |
|
88 <div style="margin-left: 2em; font-size: 0.75em;">Seed</div> |
|
89 <div style="margin-left: 4em; font-size: 0.75em;"> |
|
90 Information used in conjunction with the secret and |
|
91 sequence number to compute the response. It allows |
|
92 the same secret to be used for multiple sequences |
|
93 by changing the seed, or for authentication to |
|
94 multiple servers by using different seeds. |
|
95 </div> |
|
96 <div style="margin-left: 2em; font-size: 0.75em;">Sequence #</div> |
|
97 <div style="margin-left: 4em; font-size: 0.75em;"> |
|
98 A counter used to track key iterations. Each time |
|
99 a successful response is received by the server the |
|
100 sequence number is decremented. For example, 71. |
|
101 </div> |
|
102 <div style="margin-left: 2em; font-size: 0.75em;">Hash ID</div> |
|
103 <div style="margin-left: 4em; font-size: 0.75em;"> |
|
104 Text that identifies the cryptographical algorithm |
|
105 used. The valid hash identifiers are 'otpmd4' |
|
106 corresponding to MD4, and 'otp-md5' corresponding |
|
107 to MD5. |
|
108 </div> |
|
109 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Files</div> |
|
110 <div style="margin-left: 2em; font-size: 0.75em;"> |
|
111 The application may store a cookie in a file used to |
|
112 restore the most recent settings. The location of this |
|
113 file (or arbitrary data structure) varies according to |
|
114 the operating system. |
|
115 </div> |
|
116 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Bugs</div> |
|
117 <div style="margin-left: 2em; font-size: 0.75em;">This manual.</div> |
|
118 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Security</div> |
|
119 <div style="margin-left: 2em; font-size: 0.75em;"> |
|
120 All of the authentication strategies covered in the |
|
121 standards implemented by this application are vulnerable |
|
122 to man in the middle (MITM) attacks. The strategies can |
|
123 be combined with public key logic to defeat such attacks. |
|
124 </div> |
|
125 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Standards</div> |
|
126 <div style="margin-left: 2em; font-size: 0.75em;"> |
|
127 The IETF standards RFC 1760 (The S/KEY One-Time Password |
|
128 System) and RFC 2289 (A One-Time Password System) are |
|
129 implemented. |
|
130 </div> |
|
131 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">See also</div> |
|
132 <div style="margin-left: 2em; font-size: 0.75em;"> |
|
133 None. This is a self contained, stand alone application with |
|
134 no alias commands. It is unique in that it leverages open |
|
135 technologies like Javascript to run unmodified on a variety |
|
136 of operating systems. |
|
137 </div> |
|
138 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Author</div> |
|
139 <div style="margin-left: 2em; font-size: 0.75em;"> |
|
140 This application was written by <a href="http://michael.schloh.com/"> |
|
141 Michael Schloh von Bennewitz</a>. |
|
142 </div> |
|
143 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Contact</div> |
|
144 <div style="margin-left: 2em; font-size: 0.75em;"> |
|
145 Please refer to the <a href="http://otpwcalc.europalab.com/"> |
|
146 OTPWCalc homepage</a> for contact information. |
|
147 </div> |
|
148 <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Support</div> |
|
149 <div style="margin-left: 2em; font-size: 0.75em;"> |
|
150 The <a href="http://list.europalab.com/mailman/listinfo/otpwcalc/"> |
|
151 OTPWCalc mailing list</a> provides information and answers to |
|
152 questions. Commercial support is provided by the |
|
153 <a href="mailto:michael@schloh.com">author</a>. |
|
154 </div> |
|
155 </div><!-- /content --> |
|
156 </div><!-- /page --> |
|
157 </body> |
|
158 </html> |