TOTP for continuous auth

[zakuArbor]

Purpose

• Ensure hijacking of communication between the phone and computer isn't giving unauthorized access by using time based one time password

Sources

https://lwn.net/Articles/925870/
That time is combined with the secret, hashed, and used to generate a six-digit code that is used as the password.

I like this approach but how the secret and time is used needs to be 'randomized' to be a one way function somehow. If it's hash plus time, then it would be very easy to break if you intercept enough messages. Maybe use a random number generator whose seed is based on the time and secret scrambled

Tasks/Goals

• Break the issue into smaller tasks how you will approach the problem

Summary

*To fill out once the issue is to be closed. Give a short summary of the changes