tinnedtuna / otp-java Goto Github PK

It would be super if we can configure the build to use Maven, so that we can create a JAR for search.maven, and therefore easily pull it in as a dependency.

This code should be peer-reviewed if possible, so as to help limit the chance of bugs.

I should look into FIDO.

Does it fall within the remit of OTPs, or is it better left untouched.

Since this would be a security-critical system, FindBugs (or other static analysis) must be integrated into the build, and have 0 warnings or errors.

Code to generate and validate YubiKey OTPs.

All OTP generator/validators should have test rigs which validate:

• Test Vectors from RFCs
• Invalid input
• Randomised Tests

This would hopefully give confidence that we conform to the RFCs, and that we are probably correct in most situations.