SysCo.ch Developer web site - multiotp, the free PHP library and command line tool to check a token

multiotp, the free PHP library and command line tool to check a token

• multiotp 3.0.0 (2010-09-02) download the Windows command line tool
  or download the complete PHP library (multiotp class + multiotp command line tool + checkmultiotp script)
  
  
  The MultiOTP class is a strong authentication class in pure PHP that supports the following algorithms:
  - mOTP (http://motp.sourceforge.net)
  - OATH/HOTP RFC 4226 (http://www.ietf.org/rfc/rfc4226.txt)
  - OATH/TOTP HOTPTimeBased RFC 4226 extension
  
  multiotp works great with TekRADIUS - RADIUS Server for Windows, a very nice free RADIUS server for Windows from Yasin KAPLAN (now with MS-SQL or SQLite backend).
  
  Compatible software tokens:
  - androidtoken for Android (OATH/HOTP and OATH/TOTP)
  - oathtoken for iPhone (OATH/HOTP and OATH/TOTP)
  - various mOTP token implementations for J2ME devices, PalmOS, Python, ...
  - and many others...
  
  
  

  What's new in 3.x releases

  Now it is possible to import PSKC Algorithm Profiles containing tokens definition for TOTP and HOTP algorithm. Thus, creating a user and attributing a token is easier. You only need to give the name of the user, the token id and the desired pin code of the user.
  
  The multiotp-database-format flat file has been enhanced to version 3. Regular attributes are written attribute=value and encrypted attributes are now written encrypted_attribute:=encrypted_value. If you want to set a new pin for a user, you can open the file of the user and change the line user_pin:=ACQwJw== by user_pin=1234. The new value will be correctly read the next time, and encrypted again the next time something is written in the file.
  
  In debug mode, the command line version is now returning a text information after the exit code.
  
  

  Security information - alternate package

  Some antiviruses may report multiotp.exe as a possible generic trojan. This is because the multiotp.exe integrates other files in it. If your antivirus is annoying you with this false detection, you can download this MSI package which will install a "light" multiotp.exe with 4 external files in the same directory.
  download a embedded setup installer of multiotp (which installs external files in the same directory)
  download the MSI installer of multiotp (which installs external files in the same directory)
  
  



• checkmultiotp 3.0.0 (2010-09-02) download the script
  
  checkmultiotp is a small script that will check multiotp compliance with OATH/HOTP RFC4226. It must be installed in the same directory as the multiotp.exe file.