[41392] in Cypherpunks
Re: OneTimePasswd (not Pad)
daemon@ATHENA.MIT.EDU (Adam Shostack)
Fri Oct 13 10:36:36 1995
From: Adam Shostack <adam@homeport.org>
To: dl@hplyot.obspm.fr (Laurent Demailly)
Date: Fri, 13 Oct 1995 10:29:51 -0400 (EDT)
Cc: cypherpunks@toad.com
In-Reply-To: <9510131250.AA28930@hplyot.obspm.fr> from "Laurent Demailly" at Oct 13, 95 01:50:01 pm
| I'm about to implement an OTPasswd (mostly like s/key) scheme to my
| www browsers/clients/proxy, but I was wondering is the mere principle
| of storing H^n(S) and requesting H^(n-1) from peer (H beeing your
| favorite one way strong hash function (MD5), and S your seed+secret
| passwd) could possibly be patented somehow and thus preventing using a
| similar scheme without getting a license (from
| bellcore?),.... if there are any usage conditions/restrictions?,...
There is an IETF working group standardizing OTPassword
technology. not sure how active it still is.
ietf-otp-request@@bellcore.com
Adam
--
"It is seldom that liberty of any kind is lost all at once."
-Hume