go-feitian-oath: Template repository for Go packages in the cunicu organization

The package go-feitian-oath implements the protocol to manage HOTP, TOTP, challenge/response and static password credentials on FEITIAN FIDO keys. It uses PC/SC over CCID interface to communicate with the smart card.

Features

• Calculation of
  • Time-based One-time Passwords (TOTP)
  • Hash-based One-time Passwords (HOTP)
  • Challenge Response (HMAC)
  • Static passwords
• Slot managment
  • Set default
  • Swap
• Credential management
  • Put
  • List
  • Delete
• Factory reset of applet

Tested devices

• FEITIAN ePass FIDO NFC K9Plus
  • COS version 3301

Limitations

The OTP applet of the FEITIAN keys has several limitations in comparison to its competition:

• It can only store 2 credentials
  • Each of those two credentials can of type TOTP, HOTP, challenge/response or static password
• It only supports SHA1 and SHA256 hash algorithms
• Credentials can not be protected with a PIN code
• Initial counter values for HOTP credentials can not be set

Note: The FEITIAN OTP applet show similarities to Yubico's ykneo-oath applet when it was still open source.

Contact

Please have a look at the contact page: cunicu.li/docs/contact.

License

go-feitian-oath is licensed under the Apache 2.0 license.