search

archiecobbs / mod-authn-otp

Apache module for one-time password authentication
Apache License 2.0
63 stars 17 forks source link

Add PKCS11 handler to the mod_authn_otp #20

Closed GoogleCodeExporter closed 4 months ago

GoogleCodeExporter commented 9 years ago 
Add PKCS11 handler to the module
1.Save a mother key into secure module (HSM)
2.compute diversified key based on user serial number using OpenSSL pkcs11 
engine
3.retreive the diversified user key and use it to authenticate using OTP

Original issue reported on code.google.com by khalfaou...@gmail.com on 10 Feb 2013 at 10:52

GoogleCodeExporter commented 9 years ago 
Patches welcome :)

What kind of security token would this work with? Is there a standard spec for 
how the diversified key is calculated?

Original comment by archie.c...@gmail.com on 28 Apr 2014 at 10:03