SSCP · Question #1290
As telnet is widely know to be insecure, one time passwords (OPIE) offer a great alternative. After a user logs on remotely, OPIE will issue a challenge. What two elements will thi challenge contain?(
The correct answer is D. A seed number E. A sequence number. OPIE (One-Time Passwords in Everything) challenges consist of a seed number and a sequence number, which the user combines with their passphrase to generate the correct one-time password.
Question
As telnet is widely know to be insecure, one time passwords (OPIE) offer a great alternative. After a user logs on remotely, OPIE will issue a challenge. What two elements will thi challenge contain?( Choose two)
Options
- ACHAP
- BA hashed value
- CA random value
- DA seed number
- EA sequence number
How the community answered
(21 responses)- A5% (1)
- B10% (2)
- D86% (18)
Why each option
OPIE (One-Time Passwords in Everything) challenges consist of a seed number and a sequence number, which the user combines with their passphrase to generate the correct one-time password.
CHAP (Challenge-Handshake Authentication Protocol) is a different authentication protocol and is not an element contained within an OPIE challenge.
A hashed value is the result of the user's calculation, not an element contained in the OPIE challenge issued by the server.
A random value might be used to generate the seed, but the seed itself is the element provided in the challenge, not a generic 'random value.'
A seed number is a unique, randomly generated value provided by the server that, when combined with the user's secret key, forms part of the one-time password generation.
A sequence number (or iteration count) is issued with the seed, indicating how many times the hashing function should be applied to the secret key and seed to generate the expected one-time password.
Concept tested: OPIE (One-Time Passwords) challenge components
Topics
Community Discussion
No community discussion yet for this question.