From 0ca6653c299c75f5215cc37c6b129ce58a85e8df Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum Date: Mon, 3 Mar 2014 11:09:26 -0500 Subject: [PATCH] Fix token secret length RFC compliance RFC 4226 states the following in section 4: R6 - The algorithm MUST use a strong shared secret. The length of the shared secret MUST be at least 128 bits. This document RECOMMENDs a shared secret length of 160 bits. Reviewed-By: Jan Cholasta --- ipalib/plugins/otptoken.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ipalib/plugins/otptoken.py b/ipalib/plugins/otptoken.py index 92853dec3..91525398d 100644 --- a/ipalib/plugins/otptoken.py +++ b/ipalib/plugins/otptoken.py @@ -59,7 +59,7 @@ TOKEN_TYPES = { } # NOTE: For maximum compatibility, KEY_LENGTH % 5 == 0 -KEY_LENGTH = 10 +KEY_LENGTH = 20 class OTPTokenKey(Bytes): """A binary password type specified in base32."""