基于散列消息验证码的一次性密码算法
参考资料

↑  . IETF. 2005-12  [2019-03-18]. （原始内容存档于2019-04-06） （英语）.
↑  Frank, Hoornaert. . tools.ietf.org.   [2019-03-18]. （原始内容存档于2019-04-06）.
1 2  Diodati, Mark. . Burton Group. 2010  [2019-03-18]. （原始内容存档于2011-07-21）. Gartner's expectation is that the hardware OTP form factor will continue to enjoy modest growth while smartphone OTPs will grow and become the default hardware platform over time. ...  If the organization does not need the extensive platform support, then OATH-based technology is likely a more cost-effective choice.
↑  . Entrust. 2011  [2019-03-18]. （原始内容存档于2013-04-05）. Priced at $5 per token, the Entrust IdentityGuard Mini Token demonstrates that secure, reliable hardware authentication can be had at an attractive price. ... OATH and DES/3DES algorithm support
↑  . Smart Crib. 2013  [2019-03-18]. （原始内容存档于2013-09-04）. You can get a token typing 4 updatable passwords and 8 digit OATH HOTP codes for the price of £35, no strings attached.
↑  . Data Security Systems Solutions. 2006-02-24  [2019-03-18]. （原始内容存档于2013-12-29）. Singapore, Friday, 24 February 2006 - Data Security Systems Solutions is pleased to announce the launch of OathToken Midlet application, an extension of DS3 flagship product - Authentication Server.
↑  . diamondz... AT googlemail.com  (not a full address, no better info on author could be found). 2009  [2019-03-18]. （原始内容存档于2011-10-16）. Android Token is a project to create OATH software tokens for the Android platform. Turning a mobile phone into a One Time Password (OTP) generation device which can be used in the place of hardware tokens. ... The project supports both HOTP (Event Tokens) and TOTP (Time Tokens) specifications. ... Code license: GNU GPL v3
↑  . StrongAuth. 2010  [2019-03-18]. （原始内容存档于2010-05-18）. Time-based one-time passcode generator based on HOTP (RFC 4226).
↑  Cobbs, Archie L. . Archie L. Cobbs. 2010  [2019-03-18]. （原始内容存档于2011-08-22）. OATH Token is a free and open-source software token for two-factor authentication on the iPhone. OATH Token implements the RFC 4226 HOTP/OATH algorithm standard and is not tied to any proprietary server software.
1 2  . ActivIdentity. 2010  [2019-03-18]. （原始内容存档于2010-09-17）. All ActivIdentity Soft Tokens support the Initiative For Open Authentication (OATH) HMAC-Based One-Time Password (HOTP) algorithm. ... ActivIdentity Mobile Soft Tokens are available on leading handset operating systems, including BlackBerry®, Apple® iPhone®, Windows Mobile, and many other Java 2 Platform, Micro Edition (J2ME) enabled devices.
↑  Whitbeck, Sean. . Sean Whitbeck. 2011  [2019-03-18]. （原始内容存档于2020-08-23）. OTP Generator for Maemo on the Nokia N900. Supports OATH tokens (HOTP,TOTP) as well as the Mobile-OTP algorithm.
↑  . Feel Good Software. 2011  [2019-03-18]. （原始内容存档于2012-04-25）. SecuriToken is an RFC compliant application to create and manage multiple software tokens for the OS X platform. Turning your Mac into a One Time Password (OTP) generation device which can be used in the place of hardware tokens.
↑  Kearns, Dave. . Network World. 2004-12-06  [2019-03-18]. （原始内容存档于2012-10-14）. It may be that OATH will amount to something someday, but so far, it appears to be a stalking horse for VeriSign and that's not a bandwagon we should thoughtlessly jump on.
↑  Willoughby, Mark. . Computerworld. 2005-03-21  [2019-03-18]. （原始内容存档于2012-10-11）.
↑  Kaliski, Burt. . Computerworld. 2005-05-19  [2019-03-18]. （原始内容存档于2012-10-11）. Nevertheless, there is still good reason to question whether HOTP is suitable as a standard algorithm for OTP generation, and, more generally, whether such a standard algorithm is even necessary at all.