The client and the server have a shared secret that lets them generate a keystre... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

olefoo on June 18, 2015 | parent | context | favorite | on: YubiKey – Making secure login easy

The client and the server have a shared secret that lets them generate a keystream based on the time.

artursapek on June 18, 2015 [–]

I don't think the Yubikey is able to generate TOTPs, unless all it is doing is passing the secret to the computer which is then generating them.

fragmede on June 18, 2015 | [–]

Yubikey supports TOTP with OS driver help. Presumably the driver passes the time to the Yubikey to actually generate the TOTP.

https://www.yubico.com/products/yubikey-hardware/

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact