@TerryChia yes, the server must stay in sync, but it may have a "look-ahead" value of 4 or 5 so that a user may accidentally provision a HOTP and it not matter so much.
@TerryChia yeah apparently they're going to release the sources. Funnily enough I've got a Nexus 7 that I've just put Ubuntu onto 'cause I was thinking about getting kismet working on it. So probably just use their distro now...
@Tinned_Tuna The links from the Wikipedia page contain some information
The main point is that tokens have an enforced lifetime of a few years, so they are often updated
which allows RSA to change their algorithm over time. Apparently they did just that in 2003.
Old algorithm used a custom hash which was somewhat weak.
The 2003+ tokens rely on AES. This is basically the encryption of a 128-bit block, with a token-specific key; input data is the current time (down to the minute) and some token-specific serial number
Thus, it is distinct from TOTP, but functionally similar.
@TerryChia What's strange is that Schneier says that he is "surprised" at the level of details there are in the specifications for the vote. That's not surprising at all. The Church has used the smartest people available for almost 2000 years to write procedures full-time.
