keepassxreboot / keepassxc

KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
https://keepassxc.org/
Other
20.03k stars 1.42k forks source link

Showing incorrect TOTP strings compared to gopass on the same machine with same token #10949

Closed kode54 closed 1 week ago

kode54 commented 1 week ago

Overview

KeepassXC 2.7.9 is returning incorrect TOTP tokens for one of my password entries, I haven't checked any others recently. Gopass manages to return the correct TOTP tokens every time, using the same exact token string.

Steps to Reproduce

  1. Import a SHA-1 6 digit token from other databases.
  2. Attempt to generate TOTP token.

Expected Behavior

Token should match Gopass, which is returning correct tokens.

Actual Behavior

KeepassXC returns incorrect tokens, every time.

Context

The token is in this format:

otpauth://totp/Site%20Name:username?secret=blah&digits=6&algorithm=SHA1&issuer=Site%20Name&period=30

KeePassXC - Version 2.7.9 Revision: 8f6dd13

Qt 5.15.14 Debugging mode is disabled.

Operating system: Arch Linux CPU architecture: x86_64 Kernel: linux 6.9.5-1-cachyos

Enabled extensions:

Cryptographic libraries:

Operating System: Linux Desktop Env: KDE Windowing System: Wayland

droidmonkey commented 1 week ago

Sync your computer time

kode54 commented 1 week ago

My time is synced, I already stated that it worked with a different program on the same computer.

droidmonkey commented 1 week ago

The other program pulls time directly from the internet. Sync your time.

kode54 commented 1 week ago

My time is synced within 0.001s according to time.is. Maybe it drifted by two whole minutes before whenever it must have synced, since it seems to be working now. I guess this machine's clock is totally broken.

droidmonkey commented 1 week ago

You are welcome, I guess...