search

stoken-dev / stoken

RSA SecurID-compatible software token for Linux/UNIX systems
http://stoken.sf.net
GNU Lesser General Public License v2.1
411 stars 78 forks source link

Can a SID700 hardware token behavior be emulated? #54

Closed schedul-xor closed 5 years ago

schedul-xor commented 5 years ago

I have a SID700 hardware token which has a token-id-looking-9digits-number and expiration date written in the back side (I bought this hardware token in eBay so I don't know anything else except these two parameters). Let's say the 9 digits are "012345678", and the expiration date is "01/01/21". Can the generated 6-digits token be emulated with this library? 20190915_122420

cernekee commented 5 years ago

Yes, but you'd need to get the seed file first. When you purchase tokens through the normal channels (e.g. as a business) they send you a CD that lets you get an XML file that you can feed into stoken.

The 9-digit number doesn't have any secrets in it. If you could clone the SID700 just by looking at information on the label, it wouldn't be a very secure token. ;-)

schedul-xor commented 5 years ago

I understood. Thanks!