{"action":"closed","issue":{"url":"https://api.github.com/repos/Yubico/yubioath-desktop/issues/97","repository_url":"https://api.github.com/repos/Yubico/yubioath-desktop","labels_url":"https://api.github.com/repos/Yubico/yubioath-desktop/issues/97/labels{/name}","comments_url":"https://api.github.com/repos/Yubico/yubioath-desktop/issues/97/comments","events_url":"https://api.github.com/repos/Yubico/yubioath-desktop/issues/97/events","html_url":"https://github.com/Yubico/yubioath-desktop/issues/97","id":176096991,"number":97,"title":"HMAC-SHA256 TOTP support","user":{"login":"tycho","id":29616,"avatar_url":"https://avatars.githubusercontent.com/u/29616?v=3","gravatar_id":"","url":"https://api.github.com/users/tycho","html_url":"https://github.com/tycho","followers_url":"https://api.github.com/users/tycho/followers","following_url":"https://api.github.com/users/tycho/following{/other_user}","gists_url":"https://api.github.com/users/tycho/gists{/gist_id}","starred_url":"https://api.github.com/users/tycho/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tycho/subscriptions","organizations_url":"https://api.github.com/users/tycho/orgs","repos_url":"https://api.github.com/users/tycho/repos","events_url":"https://api.github.com/users/tycho/events{/privacy}","received_events_url":"https://api.github.com/users/tycho/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-09-09T20:04:50Z","updated_at":"2016-09-23T14:54:49Z","closed_at":"2016-09-23T14:54:49Z","body":"I have another case of an unfortunate and obscure OTP type, provided by an authenticator that my bank uses. They use the Entrust IdentityGuard authenticator. I attached an Android debugger to it and extracted the OTP key, but found that they use HMAC-SHA256 instead of the much more prolific HMAC-SHA1. I can use oathtool to generate Entrust IdentityGuard compatible OTP keys by doing:\r\n\r\n```\r\n$ oathtool -v --totp=sha256 --digits=8 fd33e2e8ad3cb1bdd3ea8f5633fcf5\r\n```\r\n**NOTE**: Not my real key -- just a truncated md5sum of 'hi there', since their seed size is 15 bytes.\r\n\r\nAny chance you could implement HMAC-SHA256 for OATH?"}}
{"actor":{"display_login":"dainnilsson"}}