paced / totp-demo

A very old demonstration of TOTP algorithms. I made this during uni.

TOTP Demo

Variable digit TOTP key visualiser for various hashing algorithms and given secrets.

Warning

This is a repo I made while in university in 2017 and is, frankly, not very good. However, the information in the site is accurate and can run for free on Heroku, so here it is for an educational reference.

Installation

All you need to run this app:

• python >= 3.5 and pip
• virtualenv
• memcached

virtualenv env
source ./env/bin/activate
pip install -r requirements.txt
python manage.py

This will run the app on localhost:5000. You should edit the manage.py file to conform to your requirements.

Features

This application is fairly simple. You can give an hash algorithm, a secret, and length from 4 to 9 and the app will generate for you a time-based one time password (TOTP). The web app updates the screen with a timer when the TOTP expires and generates a new one dynamically.

You can use this to test out how TOTP works, or as a simple checking tool. You can also send a HTTP GET request to /api/endpoint with the following parameters:

• key: String, arbitrary secret key.
• interval: Int, time interval of TOTP code.
• length: Int, length of TOTP code. Should be between 4 and 9.
• algo: String, name of the HMAC algorithm.

Deployment

If you want to deploy to Heroku for some reason:

heroku create
git push heroku master

As Heroku no longer has a free tier and this old project isn't that worth sharing in my opinion, I've spun down the demo link. Still, Heroku deployment should still be possible!