TOTP Toolset SHA256

This toolset can be used to emulate a hardware token (with SHA256 seeds) and as to perform OTP verification and drift detection . The SHA-1 version of this tool is available here

Features

  • emulates tokens with SHA-256 seeds (i.e. C203)
  • converts hex seed to base32 format
  • generates QR image based on hex or base32 seed key values
  • generates random seed values (i.e. for Token2 programmable tokens)
  • can verify the time drift with customizable skew value
  • creates CSV
We have also developed a fully client-side version of Token2 TOTP Toolset (Token2 TOTP Toolset - local), which can be run locally without accessing any libraries/resources on the Internet (including the QR image generation). The full source code of "Token2 TOTP Toolset - local" is available under our GitHub repository.

Seed in base32



QR code

OTP verification & drift detection

⏱ --

 

skew ±

Seed data

Unix epoch / 30
HMAC(secret, time)
Seed (hex)
Hex length

Token data

CSV generation



* True randomness by ETHZ QRNGaaS provided by ETH ZĂĽrich. Note: as QRNGaaS does not have an HTTPS interface, the requests are proxied via our servers.
** True randomness by ANU QRNG API provided by the Australian National University