Terence Eden personal blog
How random are TOTP codes?
I'm pretty sure that the 2FA codes generated by my bank's TOTP app have a bias towards the number 8 - because eight is an auspicious number. But is that just my stupid meaty brain noticing patterns where none exist? The TOTP algorithm uses HMAC, which in turn uses SHA-1. My aforementioned brain is not clever enough to…
- Points
- 177
- HN comments
- 104
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyMath & Algorithms2024
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jul 2, 2024 | How random are TOTP codes? by ColinWright | 177 | 104 |
