1 2OTPW revision history 3--------------------- 4 5Changes in version 1.1 (2003-06-19) 6 7 - added pam_otpw module (with assistance from Steven Murdoch) 8 9Changes in version 1.2 (2003-08-31) 10 11 - added English 4-letter-word password option 12 13 - converted several compile-time options into run-time options 14 15Changes in version 1.3 (2003-09-30) 16 17 - added new option -s to otpw-gen 18 19 - added code to otpw.c to handle a comment line starting with '#' 20 as the second line (this is not yet used by otpw-gen) 21 22 - fixed a string manipulation bug (not security critical) 23 in otpw.c (reported by Nicolas Pougetoux) 24 25 - a few more minor bug fixes and stylistic improvements 26 27Changes in version 1.4 (2004-03-??) 28 29 - removed upper limit for entropy, i.e. passwords can now be 30 practically arbitrarily long (option -e) 31 32 - new option -o to disable the random permutation of passwords in 33 the ~/.otpw file, such that they are requested in the order 34 printed on the paper 35 36 - new option -n to suppress the 4-line header and footer on each 37 printed page 38 39 - at least one column of passwords will always be printed, even with 40 option -w 0 41 42 - new option -r suggests one random password to stdout, then exists 43 44 - new password format that uses only lowercase letters and digits (-p 3), 45 means to be easy to communicate via voice 46 47 - new option -m to generate passwords from a single randomly generated 48 key, which will be printed to stderr 49 50 - new option -k to recreate a password list from a master key generated 51 with -m (this does not affect the ~/.otpw file) 52 53 - new options -E and -P to control the entropy and form of the 54 master key generated with -m 55 56Changes in version 1.5 (2014-08-07) 57 58 - support for pseudo-user installation: if system-user “otpw” exists 59 and otpw-gen is SETUID and owned by “otpw”, the hash file will be 60 called ~otpw/john instead of ~john/.otpw, and be out of reach of 61 the user 62 63 - otpw-gen: new option -l to remove lock symlink 64 (useful if the lock is owned by “otpw” rather than the user) 65 66 - ABI of otpw.c/otpw.h changed to allow for better run-time configuration 67 68 - minor cleanup, mainly to reduce warnings of modern compilers 69