Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How is the Blizzard Mobile Authenticator implemented? Does it happen to use OATH-TOTP or something similar?

share|improve this question
up vote 2 down vote accepted

There's a Windows client at which was made by reverse-engineering the protocol. They refer to as a description of the protocol, but it's rather sketchy.

You probably have to read the source to an authenticator to get a full understanding. There's one written in python at that would probably be the easiest to read.

share|improve this answer
The protocol and Python implementation make it pretty straight forward. Definitely not OATH though; damn. Thanks! – Mike Boers Jun 14 '12 at 20:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.