home :: mark :: dev :: otp

One Time Passwords

I use one-time passwords to log into some services (one time passwords are great if you don't trust the machine you're logging into because capturing keystrokes won't help an attacker get back in). After swapping my Palm Vx for a IPAQ h4350 I couldn't find a one-time password calculator anywhere. Well, apart from a Java one. And getting a Java runtime onto a Pocket PC was more effort than it looked.

Source code for doing all the hard work already exists, from NRL (called OPIE) and is compatible with S/KEY. So it was just a case of writing a few wrappers and bunging it all together into an application. Fortunately, Microsoft provide eMbedded Visual C++ for free download, so it didn't take much effort.

So without further rambling, here is a one-time password calculator compatible with OPIE and SKEY for the Pocket PC 2003 (worked with a HP IPAQ and probably others). OPIE is under a BSD-style license and I'm not going impose any additional license on my small linking glue.

Download AWE OTP (23k, Jan 2004)

Download the file above, copy it to your Pocket PC, and run it. It will remember the entries for "Count" and "Seed" that you used last time to speed things up a bit. Any comments, let me know. (gpg signature).

Download AWE OTP Source Code (200k, Jan 2004)

Source code might work if you have an eMbedded Visual C++ environment, let me know if it doesn't. This is my first Windows program in over 10 years (the last being a network game) and now I have to spend the next ten years trying to erase all thoughts of CStrings and LCPSTRs.

Created: 01 Jan 2004