owncloud / twofactor_totp

🔑 Second factor TOTP (Google Authenticator) provider for ownCloud
GNU Affero General Public License v3.0
9 stars 9 forks source link

Owncloud with 2FA TOTP token contains weak cryptographic parameters #282

Open zubanst opened 1 year ago

zubanst commented 1 year ago

Owncloud 10.1.0.6, 2FA app version 0.7.4. android app FreeOTP version 2.0.1 Activating 2FA with TOTP on Owncloud, generates a QR code. Adding the source to the FreeOTP android app, scanning the generated QR code, ends up with the following message: 'The token you are attempting to add contains weak cryptographic parameters. Use of this token is strongly discouraged. Please alert the token provider.' So there is a security risk.