Lib.rs

› Authentication
#hotp #totp #mfa #2fa #webauthn

slauth

oath HOTP and TOTP complient implementation

by Richer Archambault. Owned by devolutionsbot, devolutionsinfra.

29 releases

new 0.7.11 Feb 12, 2025
0.7.10 Aug 23, 2024
0.7.8 Jun 25, 2024
0.7.6-beta.0 Mar 5, 2024
0.2.0 Mar 21, 2019

#220 in Authentication

Download history 1/week @ 2024-10-29 3/week @ 2024-11-05 5/week @ 2024-11-26 131/week @ 2024-12-03 148/week @ 2024-12-10 36/week @ 2024-12-17 37/week @ 2024-12-24 30/week @ 2024-12-31 30/week @ 2025-01-07 10/week @ 2025-01-14 13/week @ 2025-02-04 138/week @ 2025-02-11

151 downloads per month

MIT license

4MB
7K SLoC

Rust 6K SLoC // 0.0% comments Java 349 SLoC // 0.0% comments Swift 290 SLoC // 0.1% comments TypeScript 217 SLoC // 0.3% comments JavaScript 53 SLoC // 0.1% comments Shell 25 SLoC // 0.1% comments Prolog 18 SLoC

Contains (ELF lib, 2MB) libslauth.so, (ELF lib, 2MB) libslauth.so, (JAR file, 55KB) gradle/wrapper/gradle-wrapper.jar

slauth

doc crate issue downloads license dependency status

Slauth is a Rust only, OpenSource implementation of Multiple authenticator utils / specification

Current Implementation Status

Status is describe by : ✔ as implemented, ❌ as not implemented and ⚠️ as partially implemented.

OATH Authentication (specs)

Authentication Methods

Name Status Ref
HOTP ✔ RFC 4226
TOTP ✔ RFC 6238
OCRA ❌ RFC 6287

Provisioning

Name Status Ref
PSKC ❌ RFC 6030
DSKPP ❌ RFC 6063

FIDO & W3C Specification (specs)

Universal 2nd Factor (U2F)

Name Status Ref
Server-Side Verification ✔
Raw Message ✔ Spec
HID Protocol ❌ Spec

WebAuthN

Name Status Ref
Server-Side Verification ⚠️ Spec
Raw Message ✔ Spec
COSE ⚠️ Spec

For the server side validation, the following algorithm are implemented:

  • ES256
  • ES384
  • ED25519
  • RS256

Universal Authentication Framework (UAF)

Not Implemented

Dependencies

~7–20MB
~311K SLoC