OTPClient: Woyang'anira tokeni waulere wa TOTP ndi HOTP wokhala ndi encryption yomangidwa

OTPClient: Woyang'anira tokeni waulere wa TOTP ndi HOTP wokhala ndi encryption yomangidwa

Kumayambiriro kwa chaka, tinapanga chofalitsa chachikulu chokhudzana ndi mutu wa Chitetezo cha chidziwitso. Makamaka pa nkhani ya ntchito 2FA luso, wodziwika bwino m'Chisipanishi, monga "Double Authentication Factor" o "Kutsimikizika pazinthu ziwiri". Komanso momwe mungakhazikitsire mapulogalamu aumwini otchedwa Google Authenticator ndi Twilio Auth, pogwiritsa ntchito chithunzithunzi chotchedwa Mapulogalamu a GNOME. Ngakhale lero, tifufuza foni yaulere komanso yotseguka "OTPClient".

chomwe sichina choposa a Pulogalamu ya GTK+ yowongolera ma tokeni a TOTP ndi HOTP ndi kubisa komangidwa, ndiko kuti, kutsimikizira kutsimikizika kwazinthu ziwiri, kuchirikiza zonse ziwiri mawu achinsinsi anthawi imodzi (TOTP), bwanji Ma passwords anthawi imodzi a HMAC (HOTP).

2FA pa Linux: Momwe mungayikitsire Google Authenticator ndi Twilio Authy?

Ndipo monga mwachizolowezi, tisanalowe mumutu wamasiku ano wokhudza kugwiritsa ntchito "OTPClient", komanso makamaka pa Baibulo likupezeka "2.4.9.1" zopezeka mumtundu wa flatpak, tisiyira omwe ali ndi chidwi maulalo otsatirawa kuzinthu zina zam'mbuyomu. M’njira yakuti azitha kuzifufuza mosavuta, ngati n’koyenera, akamaliza kuŵerenga bukhuli:

"Ukadaulo wa "2FA", womwe umadziwika bwino m'Chisipanishi kuti "Double Factor Authentication" kapena "Two-Factor Authentication", ndi njira yabwino kwambiri yodzitetezera, chifukwa imagwiritsa ntchito gawo limodzi lotsimikizira muzochita zathu. Ndipo kugwiritsa ntchito lusoli, pali mapulogalamu ambiri monga Google Authenticator ndi Twilio Authy. Zomwe, apa tiwona momwe tingawakhazikitsire pa GNU/Linux". 2FA pa Linux: Momwe mungayikitsire Google Authenticator ndi Twilio Authy?

Nkhani yowonjezera:

Google ithandizira kutsimikizika kwa zinthu ziwiri mosakhazikika kwa aliyense

Nkhani yowonjezera:

Google ikugwira ntchito yatsopano yovomerezeka ya 2FA yomwe idzakhazikitsidwe pa QR

OTPClient: GTK+ Software for Two-Factor Authentication

Kodi OTPClient ndi chiyani?

Malinga ndi omwe akupanga, mu tsamba lovomerezeka pa GitHub, ikufotokozedwa mwachidule motere:

"Ndi kasitomala wa OTP wolembedwa mu C/GTK, yemwe amathandizira onse TOTP ndi HOTP. Chifukwa chake, ndiyotetezeka kwambiri komanso yosavuta kugwiritsa ntchito kutsimikizika kwazinthu ziwiri, kuthandizira mapasiwedi anthawi imodzi (TOTP) ndi HMAC-based-time-time passwords (HOTP).".

Pomwe, mkati mwake tsamba lovomerezeka pa FlatHub, fotokozani mozama motere:

"Ndiosavuta kugwiritsa ntchito pulogalamu ya GTK kuyang'anira mosamala ma tokeni a TOTP ndi HOTP. Mmenemo, zomwe zilimo zimasungidwa pa disk pogwiritsa ntchito AES256-GCM ndipo mawu achinsinsi amapezedwa pogwiritsa ntchito PBKDF2 ndi 100k iterations ndi SHA512 monga hash algorithm. Komanso, imalola kutumiza / kutumiza zosunga zobwezeretsera kuchokera/ku OTP, ndikulowetsa zosunga zobwezeretsera kuchokera ku pulogalamu ya Authenticator+.".

Zida

Pakali pano, ena ake zochititsa chidwi kwambiri Iwo ndi:

1. Thandizani kuyika kwa manambala (pakati pa 4 ndi 10 kuphatikiza).
2. Imakulolani kukhazikitsa nthawi yokhazikika (pakati pa 10 ndi 120 masekondi kuphatikiza).
3. Malo osungirako zinthu zakale amasungidwa ndi AES256-GCM.
4. Kiyi imapezedwa pogwiritsa ntchito PBKDF2 yokhala ndi SHA512 ndi 100k iterations.
5. Fayilo yotsitsidwa siyisungidwa (ndipo mwachiyembekezo sinasinthidwe) ku disk.
6. Zomwe zidasiyidwa zimakhala mu "chikumbutso chotetezedwa" choperekedwa ndi Gcrypt.
7. Zimaphatikizapo chithandizo cha TOTP ndi HOTP; SHA1, SHA256 ndi SHA512 algorithm yothandizira; ndi chithandizo cha ma code a Steam.
8. Imakulolani kuti mulowetse makope osungidwa osungidwa a Authenticator Plus; lowetsani ndi kutumiza kunja zosungidwa ndi/kapena zosavuta ndi zosunga zobwezeretsera zaOTP; lowetsani ndi kutumiza zosunga zobwezeretsera za FreeOTPPlus zosaphika (zokhazokha za URI); ndikulowetsa ndi kutumiza zosunga zobwezeretsera za Aegis (mtundu wa json wokha).

Kuwunikanso pulogalamu

Musanayambe kuwunikanso ntchitoyi, ndikofunikira kudziwa kuti idzayesedwa pa Yankhani wotchedwa MiracleOS 3.0 MX-NG-22.01 kutengera MX-21 (Debian-11) ndi XFCE ndi zomwe tafufuza posachedwa Apa.

Tsitsani ndikuyika

Za anu koperani ndikuyika tachita zotsatirazi command prompt mu terminal (console), monga zikuwonetsedwa pansipa:

«sudo flatpak install flathub com.github.paolostivanin.OTPClient»

Kukonzekera ndi kufufuza

Mukayiyika, titha kuyiyambitsa ndikuyifufuza, monga tawonera pansipa:

Kuti mumve zambiri pa "OTPClient", mutha kuwona maulalo awa:

• Phukusi la Debian
• Njira ina / Open Source
• GitHub / Wiki / Buku la ogwiritsa

Chidule

Mwachidule, tikukhulupirira kuti bukhuli kapena phunziro la kukhazikitsa "OTPClient", kukhazikitsa mtundu wake waposachedwa womwe ukupezeka kudzera pa Flatpak phukusi woyang'anira, ikhale yothandiza kwambiri kwa ambiri, makamaka omwe akufunika kupeza zofunikira pa intaneti ndi ntchito, kudzera zifukwa ziwiri, kwambiri mawu achinsinsi anthawi imodzi (TOTP), bwanji Ma passwords anthawi imodzi a HMAC (HOTP).

Tikukhulupirira kuti bukuli ndi lothandiza kwambiri kwa anthu onse «Comunidad de Software Libre, Código Abierto y GNU/Linux». Ndipo osayiwala kuyankhapo pa izi pansipa, ndikugawana ndi ena pamasamba omwe mumakonda, ma tchanelo, magulu kapena madera a malo ochezera kapena mauthenga. Pomaliza, pitani patsamba lathu lanyumba pa «KuchokeraLinux» kuti muwone zambiri, ndikulowa nawo njira yathu yovomerezeka Telegalamu yochokera ku DesdeLinux.