Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

How is the Blizzard Mobile Authenticator implemented? Does it happen to use OATH-TOTP or something similar?

share|improve this question
add comment

1 Answer

up vote 2 down vote accepted

There's a Windows client at http://code.google.com/p/winauth/ which was made by reverse-engineering the protocol. They refer to http://www.wowwiki.com/Battle.net_Mobile_Authenticator_Specification as a description of the protocol, but it's rather sketchy.

You probably have to read the source to an authenticator to get a full understanding. There's one written in python at https://github.com/Adys/python-bna that would probably be the easiest to read.

share|improve this answer
    
The protocol and Python implementation make it pretty straight forward. Definitely not OATH though; damn. Thanks! –  Mike Boers Jun 14 '12 at 20:50
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.