Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"OTP failed to fetch time/counter" on airgapped Jade #197

Open
mamolas opened this issue Jan 15, 2025 · 6 comments
Open

"OTP failed to fetch time/counter" on airgapped Jade #197

mamolas opened this issue Jan 15, 2025 · 6 comments

Comments

@mamolas
Copy link

mamolas commented Jan 15, 2025

When login to Jade Classic with QR PIN or SeedQR it fails to view stored OTPs it says "OTP failed to fetch time/counter" except when connected with Green over Bluetooth.

Is there a workaround preferably over QR to tell Jade the current timestamp so OTP can work 100% offline without relying on a companion app?
Running latest firmware 1.0.33

@JamieDriver
Copy link
Collaborator

It's a fair point - how to communicate an initial 'current time' to an airgapped jade so TOTP can work.

There is a (bespoke) QR that Jade will accept to set the time - we just need something to create and display it.
Maybe this is something the jade website could do, @bitcoinhelp ?

@jgriffiths
Copy link
Collaborator

Perhaps a UX screen prompting the user to set the time when required? A QR would need to be scanned within 30s which might not be possible for some users...

@JamieDriver
Copy link
Collaborator

I guess I was thinking a page with a qr which updated every ~5-10s ... but yes, it may be equally easy to just have a simple time entry screen on Jade (either utc only, or with a tz offset).

@mamolas
Copy link
Author

mamolas commented Jan 17, 2025

both options would fit best, manual input for users having issues scanning fast enough or to read a dynamic QR timestamp for a better UX, Jade could run a timer since the last timestamp update so it can generate several TOPTs in the same session until logout

@JamieDriver
Copy link
Collaborator

Oh yes, once the time is set (after power-up/boot) jade then keeps time internally - it just does not have a clock that is running when powered-off, so needs to be told at every power-on or unlock.
At the moment the companion apps tell Jade the current utc time when they initially connect, and jade keeps track of it internally from then - so yes, you'd only have to scan/enter the time once per "power-session", and you should be able to generate as many OTPs as you require all the time jade is not powered-down.

@mamolas
Copy link
Author

mamolas commented Jan 18, 2025

There is a (bespoke) QR that Jade will accept to set the time - we just need something to create and display it. Maybe this is something the jade website could do, @bitcoinhelp ?

While it gets implemented, if it happens to be considered, can you provide an example of the string with Unix epoch time that Jade will understand as a set time instruction? I can input it at any FOSS QR generator and scan it.
To store the most sensitive OTPs in a 100% offline blind device like Jade is a strong layer of security

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants