One-Time Passwords (OTP)

• Use a password once then discard it

• Capturing it doesn't matter

• Can be generated as a “one-time pad” (pre-determined list agreed by both ends)

• Can be generated automatically

• • RSA SecurID uses a hash of a time code
  • S/Key
  • Yubikey...
  • see http://en.wikipedia.org/wiki/One-time_password