Blog
TOTP
CryptographyAuthenticationSecurity
The Architecture of Time-Based One-Time Passwords: Inside RFC 6238 and HMAC Generation
A comprehensive mathematical and protocol analysis of RFC 6238 Time-Based One-Time Passwords (TOTP), exploring dynamic truncation, HMAC-SHA1 step counters, clock drift mitigation, and secure in-browser execution.
PetexSpace
CryptographyAuthenticationPasskeys
Passkeys vs TOTP: The Cryptographic Shift from Shared Secrets to Public Key Signatures
An architectural and security analysis comparing RFC 6238 Time-Based One-Time Passwords with FIDO2/WebAuthn Passkeys, exploring Adversary-in-the-Middle phishing resistance and origin binding.
PetexSpace