1994-10-19 00:03:45 +00:00
|
|
|
.\" @(#)skey.1 1.1 10/28/93
|
1999-08-28 00:22:10 +00:00
|
|
|
.\" $FreeBSD$
|
1994-10-19 00:03:45 +00:00
|
|
|
.\"
|
2001-01-12 18:01:17 +00:00
|
|
|
.Dd October 28, 1993
|
|
|
|
|
.Dt KEY 1
|
|
|
|
|
.Os
|
|
|
|
|
.Sh NAME
|
|
|
|
|
.Nm S/key
|
|
|
|
|
.Nd "A procedure to use one time passwords for accessing computer systems"
|
|
|
|
|
.Sh DESCRIPTION
|
|
|
|
|
.Nm
|
1994-10-19 00:03:45 +00:00
|
|
|
is a procedure for using one time password to authenticate access to
|
2000-03-02 09:14:21 +00:00
|
|
|
computer systems.
|
|
|
|
|
It uses 64 bits of information transformed by the
|
|
|
|
|
MD4 algorithm.
|
|
|
|
|
The user supplies the 64 bits in the form of 6 English
|
1994-10-19 00:03:45 +00:00
|
|
|
words that are generated by a secure computer.
|
2001-01-12 18:01:17 +00:00
|
|
|
Example use of the
|
|
|
|
|
.Nm
|
|
|
|
|
program
|
|
|
|
|
.Nm key :
|
|
|
|
|
.Bd -literal -offset indent
|
|
|
|
|
>key 99 th91334
|
|
|
|
|
Enter password: <your secret password is entered here>
|
|
|
|
|
OMEN US HORN OMIT BACK AHOY
|
|
|
|
|
>
|
|
|
|
|
.Ed
|
|
|
|
|
.Pp
|
|
|
|
|
The programs that are part of the
|
|
|
|
|
.Nm
|
|
|
|
|
system are
|
|
|
|
|
.Nm keyinit , key ,
|
|
|
|
|
and
|
|
|
|
|
.Nm keyinfo .
|
|
|
|
|
.Nm Keyinit
|
|
|
|
|
is used to get your ID set up,
|
|
|
|
|
.Nm key
|
|
|
|
|
is
|
1994-10-19 00:03:45 +00:00
|
|
|
used to get the one time password each time,
|
2001-01-12 18:01:17 +00:00
|
|
|
.Nm keyinfo
|
|
|
|
|
is used to extract information from the
|
|
|
|
|
.Nm
|
|
|
|
|
database.
|
|
|
|
|
.Pp
|
|
|
|
|
When you run
|
|
|
|
|
.Nm keyinit
|
|
|
|
|
you inform the system of your
|
|
|
|
|
secret password.
|
|
|
|
|
Running
|
|
|
|
|
.Nm key
|
|
|
|
|
then generates the
|
1994-10-19 00:03:45 +00:00
|
|
|
one-time passwords, and also requires your secret
|
2001-01-12 18:01:17 +00:00
|
|
|
password.
|
|
|
|
|
If however, you misspell your password
|
|
|
|
|
while running
|
|
|
|
|
.Nm key ,
|
|
|
|
|
you will get a list of passwords
|
1994-10-19 00:03:45 +00:00
|
|
|
that will not work, and no indication about the problem.
|
2001-01-12 18:01:17 +00:00
|
|
|
.Pp
|
|
|
|
|
Password sequence numbers count backward from 99.
|
|
|
|
|
If you don't know this, the syntax for
|
|
|
|
|
.Nm key
|
|
|
|
|
will be confusing.
|
|
|
|
|
.Pp
|
1994-10-19 00:03:45 +00:00
|
|
|
You can enter the passwords using small letters, even
|
2001-01-12 18:01:17 +00:00
|
|
|
though the
|
|
|
|
|
.Nm key
|
|
|
|
|
program gives them in caps.
|
|
|
|
|
.Pp
|
|
|
|
|
.Tn Macintosh
|
|
|
|
|
and a general purpose
|
|
|
|
|
.Tn PC
|
|
|
|
|
use are available.
|
|
|
|
|
.Pp
|
|
|
|
|
Under
|
|
|
|
|
.Fx ,
|
|
|
|
|
you can control, with
|
|
|
|
|
.Pa /etc/skey.access ,
|
|
|
|
|
from which hosts and/or networks the use of
|
|
|
|
|
.Nm
|
|
|
|
|
passwords is obligated.
|
|
|
|
|
.Sh SEE ALSO
|
|
|
|
|
.Xr key 1 ,
|
|
|
|
|
.Xr keyinfo 1 ,
|
|
|
|
|
.Xr keyinit 1 ,
|
|
|
|
|
.Xr skey.access 5
|
|
|
|
|
.Sh AUTHORS
|
|
|
|
|
.An Phil Karn
|
|
|
|
|
.An Neil M. Haller
|
|
|
|
|
.An John S. Walden
|
|
|
|
|
.An Scott Chasin
|
