One time passwords in everything (OPIE): experiences with building and using stronger authentication

  • Authors:
  • Daniel L. McDonald;Randall J. Atkinson;Craig Metz

  • Affiliations:
  • U.S. Naval Research Laboratory, Washington, DC;U.S. Naval Research Laboratory, Washington, DC;Kaman Sciences Corporation, Alexandria, Virginia

  • Venue:
  • SSYM'95 Proceedings of the 5th conference on USENIX UNIX Security Symposium - Volume 5
  • Year:
  • 1995

Quantified Score

Hi-index 0.00

Visualization

Abstract

The U.S. Naval Research Laboratory's OPIE (One-time Passwords In Everything) Software Distribution is an enhancement of Bellcore's S/KeyTM 1.0 package. OPIE improves on S/Key in several areas, including FTP service with one-time passwords, and a stronger algorithm for generating one-time passwords. OPIE diverges from S/Key in select design decisions and in the behavior of certain programs. While not a total security solution, OPIE can be an important part of one. OPIE and its evolutionary predecessors have been used for over a year in parts of NRL. Its use has taught the authors lessons on implementation, usability, deployment, and future directions for improvement.