Many banks offer some token devices in order to create passwords for one time usage. I wonder which OTP algorithm they use? Is it HOTP or TOTP?
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Many banks offer some token devices in order to create passwords for one time usage. I wonder which OTP algorithm they use? Is it HOTP or TOTP?
As aiodintsov said, the answer cannot be generalized but the choice of technology really depends upon the bank. My guess is
TOTP. But let me give a reason on the choice.TOTP removes the need for client and server to stay in sync on the event counter by using a Unix timestamp instead. The algorithm allows the server to choose how far off an incoming timestamp it deems acceptable, in order to correct for clock drift.
When you receive an OTP from a bank, it will usually say that you should use that OTP within certain timelimit after which it will expire. If the banks use
HOTP, the OTPs neednot expire after a time interval rather it will expire only after you place another request, incrementing the counter.So, next time you receive a OTP which does not ask you to use it within a timelimit, be sure it is generated using
HOTP.