1.
MFA
JAWS FESTA 2017 LT
Akira SHIBATA

2.
•
•
•
•

3.
• MFA Multi-Factor Authentication
• TOTP Code

4.
MFA

5.
MFA

6.
•
•
•

7.
IIJ SmartKey

8.
IIJ SmartKey
•
•
•
•

9.
1Password

10.
1Password
•
• ID/Password
•
•
• …

11.
MFA
• TOTP
https://aws.amazon.com/jp/iam/details/mfa/

12.
TOTP

13.
TOTP?
• RFC 6238 - TOTP: Time-Based One-Time
Password Algorithm
• HOTP
•

14.
• PyOTP - The Python One-Time Password Library
• https://github.com/pyotp/pyotp
• otp: One Time Password utilities Go / Golang
• https://github.com/pquerna/otp

15.
PyOTP
[akira@Akira-Mac ~]$ python
Python 2.7.10 (default, Jul 15 2017, 17:16:57)
[GCC 4.2.1 Compatible Apple LLVM 9.0.0 (clang-900.0.31)] on
darwin
Type "help", "copyright", "credits" or "license" for more information.
>>> import pyotp
>>> totp = pyotp.TOTP(“seecret_key")
>>> print(totp.now())
139568
>>> print(totp.now())
416613

16.
• https://github.com/beli68/pymfa
pip install git+https://github.com/beli68/pymfa
README

17.
• ˜