OTPW – A one-time password login package

Very similar to Steve Gibson's Perfect Paper Passwords scheme: https://www.grc.com/ppp.htm I wrote a Java implementation for phones (http://www.jgc.org/blog/2007/10/java-client-implementation-o...). This was my one and only foray into program for J2ME. I suspect that's something you only do once unless someone pays you a lot of money.

lolipop1• 16 years ago

So this is basically solve the same problems as http://en.wikipedia.org/wiki/SecurID, but using a paper sheet instead of a hardware/software generated key?

gnosis2• 16 years ago

They are similar, but each has its advantages and disadvantages. According to the OTPW site:

"Admittedly, the security obtained by OTPW is not comparable with that of a challenge-response system in which the user has a PIN protected special calculator that generates the response. On the other hand, a piece of paper is much more portable, much more robust, and much cheaper than a special calculator. OTPW was designed for the large user base, for which an extra battery-powered device is inconvenient or not cost effective and who therefore still use normal Unix passwords everywhere."

OTPW – A one-time password login package

Related Stories