freebsd security - Aug 2012 - Hardware TOTP tokens

I'm looking for *rekeyable* TOTP (RFC 6238) tokens - preferably, but not
necessarily OATH-certified.  Does anyone know where I can find something
like that?

Alternatively, does anyone know of a reasonably-priced device that can
be used to implement this?  The requirements are very modest - a cheap
microcontroller with a few kB of EEPROM and few kB of RAM, a reasonably
precise real-time clock, and a six-digit seven-segment display, all in a
package the size of a pack of gum.

Note that we're not talking about large volumes - I need a few hundred,
at most.

DES
-- 
Dag-Erling Sm?rgrav - des@des.no

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 8/21/12 6:37 AM, Dag-Erling Sm?rgrav wrote:
> I'm looking for *rekeyable* TOTP (RFC 6238) tokens - preferably,
> but not necessarily OATH-certified.  Does anyone know where I can
> find something like that?
> 
> Alternatively, does anyone know of a reasonably-priced device that
> can be used to implement this?  The requirements are very modest -
> a cheap microcontroller with a few kB of EEPROM and few kB of RAM,
> a reasonably precise real-time clock, and a six-digit seven-segment
> display, all in a package the size of a pack of gum.
> 
> Note that we're not talking about large volumes - I need a few
> hundred, at most.
Is it intentional to avoid Google Authenticator?  (I would consider it
because it's relatively easier to synchronize time and easy to notice
when they are missing but yes, the end user needs an Android or iOS
based smartphone and it's a hassle when they migrate).

Cheers,

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)

iQEcBAEBCAAGBQJQM7FfAAoJEG80Jeu8UPuzguoH+gJBM0jr1CV+2uZ89aEVoR6A
6fjilvIYO/v8X5a6P5Lv6TJ8jZKgFM0lWJW18xP+CDQ9haPNE7CjR3eMaqcrbI3j
3MbvDp3o+TsjhV1Pht5r+vSEEmmFJRq1Bp0YOvzTn20VrxT3+aNAkzc0UyXERV3g
1rtHnt7RAsSbBpH9D8IOP5bilxAdW82Cws68fUnqTU6DjFkVX4JmzBBMiqW7h7Ps
YlO1Os1OytJOuL+bZDnAtnwkUfqHAA3VPp3bu53gDve+YsDXffKpnYZx4FIpsvAn
EJP1oN2bVBFug4g94YtLBUTJGSTOBE0et5gOxkeSutDadgQiwc28ZKx1/dBzTy4=BmVW
-----END PGP SIGNATURE-----

On Tue, Aug 21, 2012 at 2:37 PM, Dag-Erling Sm?rgrav <des@des.no>
wrote:
> I'm looking for *rekeyable* TOTP (RFC 6238) tokens - preferably, but
not
> necessarily OATH-certified.  Does anyone know where I can find something
> like that?
The Aladdin eToken PASS is a very simple one, though I haven't been
able to find docs on how your initialize or administer them.

http://www.safenet-inc.com/products/data-protection/two-factor-authentication/etoken-pass/

They are sort of programable too if you really want:
https://www.youtube.com/watch?v=QiTNlSgk-xY :-)

-- 
Simon L. B. Nielsen