3 ms·
It's not golfed at all, it's more or less where you get when you implement TOTP by hand from the RFCs. Except for the final reduction, which in the RFC is impl
by masklinn 4y ago
It's not golfed at all, it's more or less where you get when you implement TOTP by hand from the RFCs.
Except for the final reduction, which in the RFC is implemented via a mod, and the base32 decoding, which is not part of either HOTP or TOTP RFCs, but is instead part of the ad hoc "key uri" format. Which is a funny spec because it was defined for Google Authenticator yet AFAIK GA uses none of the parametrisation so that's only useful if you specifically want to exclude GA users.