3 ms·
FYI, you can use this utility to get the Symantec TOTP code into a standard TOTP program like Authy or Google Authenticator: https://github.com/dlenski/python-
by js2 7y ago
FYI, you can use this utility to get the Symantec TOTP code into a standard TOTP program like Authy or Google Authenticator:
https://github.com/dlenski/python-vipaccess https://github.com/dlenski/python-vipaccess
- closeparen 7y agoWoah, interesting! I thought TOTP used a shared secret rather than asymmetric encryption. The only thing I had to give Fidelity was the credential ID. Is that enough to generate or verify codes? It does that require key material that only Symantec has?
- js2 7y agoThis blog post explains how it works: https://www.cyrozap.com/2014/09/29/reversing-the-symantec-vip-access-provisioning-protocol/ https://www.cyrozap.com/2014/09/29/reversing-the-symantec-vi... But yes, the original author extracted a pair of shared secrets from the Symantec executable.