Sample code for 30+ languages & platforms
Xbase++

TOTP Algorithm: Time-Based One-Time Password Algorithm

See more Encryption Examples

Demonstrates how to generate an time-based one-time password (TOTP) as specified in RFC 6238. This is the algorithm used by Google Authenticator.

Note: This example requires Chilkat v9.5.0.77 or greater.

Chilkat Xbase++ Downloads

Xbase++
LOCAL oCrypt
LOCAL cSeed
LOCAL cSeed32
LOCAL cSeed64

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

oCrypt := CreateObject("Chilkat.Crypt2")

//  Duplicate the following results from RFC 6238

//  TOTP Algorithm: Test Values
//  
//  +-------------+--------------+------------------+----------+--------+
//  |  Time (sec) |   UTC Time   | Value of T (hex) |   TOTP   |  Mode  |
//  +-------------+--------------+------------------+----------+--------+
//  |      59     |  1970-01-01  | 0000000000000001 | 94287082 |  SHA1  |
//  |             |   00:00:59   |                  |          |        |
//  |      59     |  1970-01-01  | 0000000000000001 | 46119246 | SHA256 |
//  |             |   00:00:59   |                  |          |        |
//  |      59     |  1970-01-01  | 0000000000000001 | 90693936 | SHA512 |
//  |             |   00:00:59   |                  |          |        |
//  |  1111111109 |  2005-03-18  | 00000000023523EC | 07081804 |  SHA1  |
//  |             |   01:58:29   |                  |          |        |
//  |  1111111109 |  2005-03-18  | 00000000023523EC | 68084774 | SHA256 |
//  |             |   01:58:29   |                  |          |        |
//  |  1111111109 |  2005-03-18  | 00000000023523EC | 25091201 | SHA512 |
//  |             |   01:58:29   |                  |          |        |
//  |  1111111111 |  2005-03-18  | 00000000023523ED | 14050471 |  SHA1  |
//  |             |   01:58:31   |                  |          |        |
//  |  1111111111 |  2005-03-18  | 00000000023523ED | 67062674 | SHA256 |
//  |             |   01:58:31   |                  |          |        |
//  |  1111111111 |  2005-03-18  | 00000000023523ED | 99943326 | SHA512 |
//  |             |   01:58:31   |                  |          |        |
//  |  1234567890 |  2009-02-13  | 000000000273EF07 | 89005924 |  SHA1  |
//  |             |   23:31:30   |                  |          |        |
//  |  1234567890 |  2009-02-13  | 000000000273EF07 | 91819424 | SHA256 |
//  |             |   23:31:30   |                  |          |        |
//  |  1234567890 |  2009-02-13  | 000000000273EF07 | 93441116 | SHA512 |
//  |             |   23:31:30   |                  |          |        |
//  |  2000000000 |  2033-05-18  | 0000000003F940AA | 69279037 |  SHA1  |
//  |             |   03:33:20   |                  |          |        |
//  |  2000000000 |  2033-05-18  | 0000000003F940AA | 90698825 | SHA256 |
//  |             |   03:33:20   |                  |          |        |
//  |  2000000000 |  2033-05-18  | 0000000003F940AA | 38618901 | SHA512 |
//  |             |   03:33:20   |                  |          |        |
//  | 20000000000 |  2603-10-11  | 0000000027BC86AA | 65353130 |  SHA1  |
//  |             |   11:33:20   |                  |          |        |
//  | 20000000000 |  2603-10-11  | 0000000027BC86AA | 77737706 | SHA256 |
//  |             |   11:33:20   |                  |          |        |
//  | 20000000000 |  2603-10-11  | 0000000027BC86AA | 47863826 | SHA512 |
//  |             |   11:33:20   |                  |          |        |
//  +-------------+--------------+------------------+----------+--------+

//  Seed for HMAC-SHA1
cSeed := "3132333435363738393031323334353637383930"

//  Seed for HMAC-SHA256 - 32 bytes
cSeed32 := "3132333435363738393031323334353637383930313233343536373839303132"

//  Seed for HMAC-SHA512 - 64 bytes
cSeed64 := "31323334353637383930313233343536373839303132333435363738393031323334353637383930313233343536373839303132333435363738393031323334"

//  See the online reference documentation for an explanation of arguments.
? "TOTP(59,sha1) " + oCrypt:Totp(cSeed, "hex", "0", "59", 30, 8, -1, "sha1")
? "TOTP(59,sha256) " + oCrypt:Totp(cSeed32, "hex", "0", "59", 30, 8, -1, "sha256")
? "TOTP(59,sha512) " + oCrypt:Totp(cSeed64, "hex", "0", "59", 30, 8, -1, "sha512")

? "TOTP(1111111109,sha1) " + oCrypt:Totp(cSeed, "hex", "0", "1111111109", 30, 8, -1, "sha1")
? "TOTP(1111111109,sha256) " + oCrypt:Totp(cSeed32, "hex", "0", "1111111109", 30, 8, -1, "sha256")
? "TOTP(1111111109,sha512) " + oCrypt:Totp(cSeed64, "hex", "0", "1111111109", 30, 8, -1, "sha512")

? "TOTP(1111111111,sha1) " + oCrypt:Totp(cSeed, "hex", "0", "1111111111", 30, 8, -1, "sha1")
? "TOTP(1111111111,sha256) " + oCrypt:Totp(cSeed32, "hex", "0", "1111111111", 30, 8, -1, "sha256")
? "TOTP(1111111111,sha512) " + oCrypt:Totp(cSeed64, "hex", "0", "1111111111", 30, 8, -1, "sha512")

? "TOTP(1234567890,sha1) " + oCrypt:Totp(cSeed, "hex", "0", "1234567890", 30, 8, -1, "sha1")
? "TOTP(1234567890,sha256) " + oCrypt:Totp(cSeed32, "hex", "0", "1234567890", 30, 8, -1, "sha256")
? "TOTP(1234567890,sha512) " + oCrypt:Totp(cSeed64, "hex", "0", "1234567890", 30, 8, -1, "sha512")

? "TOTP(2000000000,sha1) " + oCrypt:Totp(cSeed, "hex", "0", "2000000000", 30, 8, -1, "sha1")
? "TOTP(2000000000,sha256) " + oCrypt:Totp(cSeed32, "hex", "0", "2000000000", 30, 8, -1, "sha256")
? "TOTP(2000000000,sha512) " + oCrypt:Totp(cSeed64, "hex", "0", "2000000000", 30, 8, -1, "sha512")

? "TOTP(20000000000,sha1) " + oCrypt:Totp(cSeed, "hex", "0", "20000000000", 30, 8, -1, "sha1")
? "TOTP(20000000000,sha256) " + oCrypt:Totp(cSeed32, "hex", "0", "20000000000", 30, 8, -1, "sha256")
? "TOTP(20000000000,sha512) " + oCrypt:Totp(cSeed64, "hex", "0", "20000000000", 30, 8, -1, "sha512")

//  Note: To compute the TOTP using the current system date/time, pass an empty string instead of an explicit time.
//  For example:
? "TOTP(CurrentSystemTime,sha1) " + oCrypt:Totp(cSeed, "hex", "0", "", 30, 8, -1, "sha1")
? "TOTP(CurrentSystemTime,sha256) " + oCrypt:Totp(cSeed32, "hex", "0", "", 30, 8, -1, "sha256")
? "TOTP(CurrentSystemTime,sha512) " + oCrypt:Totp(cSeed64, "hex", "0", "", 30, 8, -1, "sha512")

oCrypt:destroy()