app/src/main/java/com/zeapo/pwdstore/utils/Totp.java


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

package com.zeapo.pwdstore.utils;

import android.util.Log;

import org.apache.commons.codec.binary.Base32;

import java.math.BigInteger;
import java.nio.ByteBuffer;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.util.Arrays;

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;

public class Totp {

    private static final String ALGORITHM = "HmacSHA1";
    private static final int TIME_WINDOW = 30;
    private static final int CODE_DIGITS = 6;

    private static final Base32 BASE_32 = new Base32();

    private Totp() {
    }

    public static String calculateCode(String secret, long epochSeconds) {
        SecretKeySpec signingKey = new SecretKeySpec(BASE_32.decode(secret), ALGORITHM);

        Mac mac = null;
        try {
            mac = Mac.getInstance(ALGORITHM);
            mac.init(signingKey);
        } catch (NoSuchAlgorithmException e) {
            Log.e("TOTP", ALGORITHM + " unavailable - should never happen", e);
            return null;
        } catch (InvalidKeyException e) {
            Log.e("TOTP", "Key is malformed", e);
            return null;
        }

        long time = epochSeconds / TIME_WINDOW;
        byte[] digest = mac.doFinal(ByteBuffer.allocate(8).putLong(time).array());
        int offset = digest[digest.length - 1] & 0xf;
        byte[] code = Arrays.copyOfRange(digest, offset, offset + 4);
        code[0] = (byte) (0x7f & code[0]);
        String strCode = new BigInteger(code).toString();
        return strCode.substring(strCode.length() - CODE_DIGITS);
    }
}