Implement TOTP ("Google auth")

slush0 commented 5 years ago

TPM can be easily turned into second-factor application like Google Auth:

Server-provided secret is encrypted via CipherKeyValue and encrypted data stored in TPM
New method in trezor-core will accept encrypted data and current timestamp (possible use of Roughtime?) and generate OTP to show on display.

That way Trezor works as common second factor (on services where superior U2F is not supported) and all OTP secrets are backed up in TPM, which solves common problem of losing server-provided secrets with losing mobile phone.

nickels commented 5 years ago

This would be an excellent addition!

prusnak commented 5 years ago

This depends on the firmware: https://github.com/trezor/trezor-core/issues/516

zsoltsandor commented 4 years ago

I second this.

trezor / trezor-password-manager

Implement TOTP ("Google auth") #55