blob: 19d1eb7a15c1c8225198f2d5da34f7b9cde7db79 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
|
- Decide what we want to do if passwords are too long: truncate, fail
silently, fail with error message (current solution). Affects
`read_user_password` and `read_password` in `nkotp.c`.
- Consider moving some constants to `libnitrokey`, especially the maximum
password lengths and the number of HOTP and TOTP slots.
- Find out the appropriate values to pass to `NK_get_totp_code` and
`NK_get_totp_code_PIN`. Affects `otp_generate` and `otp_generate_password`
in `nkotp.c`.
- Use a better seed than the current time stamp for the generation of the
temporary password (`generate_tmp_password` in `nkotp.c`). Consider
switching to a better random number generator in the first place
(`getrandom` for Linux).
|
