KullGames LiveAuthenticator

A real RFC 6238 TOTP / RFC 4226 HOTP implementation from OnlyCSharp 3.0 Cybersecurity.Cryptography.OneTimePassword (OcTotp / OcHotp / OcOtpAuthUri) - the same algorithm behind Google Authenticator and Authy. Every code below is computed live at build time. No JavaScript, no WASM.

Live code (build-time snapshot)

Demo shared secret (NOT a real credential): MySuperSecretKey123!

FieldValue
Unix time sampled1784570844
Current 6-digit code898986
Refreshes in6 s
Round-trip Verify()True

otpauth:// provisioning URI (what a QR code would encode):

otpauth://totp/KullGames%20LiveAuthenticator%20Demo:demo%40kullgames.com?secret=JV4VG5LQMVZFGZLDOJSXIS3FPEYTEMZB&issuer=KullGames%20LiveAuthenticator%20Demo&algorithm=SHA1&digits=6&period=30

RFC 4226 HOTP test vectors (Appendix D)

Key = ASCII "12345678901234567890", 6 digits, SHA-1. Passed 10/10.

CounterComputedRFC expectedMatch
0755224755224OK
1287082287082OK
2359152359152OK
3969429969429OK
4338314338314OK
5254676254676OK
6287922287922OK
7162583162583OK
8399871399871OK
9520489520489OK

RFC 6238 TOTP test vectors (Appendix B)

8-digit codes, 30s period, per-hash keys. Passed 18/18.

Unix timeAlgorithmComputedRFC expectedMatch
59SHA19428708294287082OK
59SHA2564611924646119246OK
59SHA5129069393690693936OK
1111111109SHA10708180407081804OK
1111111109SHA2566808477468084774OK
1111111109SHA5122509120125091201OK
1111111111SHA11405047114050471OK
1111111111SHA2566706267467062674OK
1111111111SHA5129994332699943326OK
1234567890SHA18900592489005924OK
1234567890SHA2569181942491819424OK
1234567890SHA5129344111693441116OK
2000000000SHA16927903769279037OK
2000000000SHA2569069882590698825OK
2000000000SHA5123861890138618901OK
20000000000SHA16535313065353130OK
20000000000SHA2567773770677737706OK
20000000000SHA5124786382647863826OK