Software U2F Authenticator for macOS

Re:Software U2F Authenticator for macOS by eikenberry on Thursday September 05, 2019 @09:07PM (#20892116)

The oathtool command line app supports TOTP. It is pretty straightforward to script something if you need it. The package has the same name (oathtool).

[ Parent | on HN ]

Re:Software U2F Authenticator for macOS by w8rbt on Thursday September 05, 2019 @09:16PM (#20892156)

Does oathtool take stdin? Last time I looked it did not. I keep my TOTP secrets PGP encrypted and pipe them to goathgen.

    $ gpg -d encrypted-secret.txt | goathgen

https://github.com/w8rbt/goathgen

[ Parent | on HN ]

Re:Software U2F Authenticator for macOS by beefhash on Friday September 06, 2019 @12:48AM (#20893149)

Funny you'd wrote a wrapper like that, too. I ended up making something in C that uses readpassphrase(3) [with -lbsd on Linux, but I haven't built it on a Linux machine in years] and zeroes the memory with explicit_bzero(3) as it goes out.

The keys come from a dedicated password manager that only stores TOTP secrets and the password manager wipes the clipboard.

All this happens on a physically separate machine.

[ Parent | on HN ]