I'm a student and I'm working on an OTP authentication systeme based on OATH using smart phones as tokens for the clients. My problem is the protection the OTP seed at both client and validation server; encrypting the seed using a passphrase or a PIN is a solution. My question is if there is another methods to ensure the security of the OTP seed ?
Thanks in advance. Have a nice day.