Automic VaultAutomic Vault

brew

oath-toolkit を Homebrew, apk, MacPorts, Nix, pacman, zypper, apt, dnf でインストール

oath-toolkit のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install oath-toolkit

local Homebrew formula metadata

MacPorts確認済み · 94%
sudo port install oath-toolkit

MacPorts ports tree · security/oath-toolkit/Portfile · ソース: api.github.com

Linux

Alpine Linux apk確認済み · 92%
sudo apk add oath-toolkit

Alpine Linux edge package indexes · oath-toolkit · ソース: dl-cdn.alpinelinux.org

Nix確認済み · 92%
nix profile install nixpkgs#oath-toolkit

nixpkgs package indexes · pkgs/by-name/oa/oath-toolkit/package.nix · ソース: api.github.com

Arch Linux pacman確認済み · 92%
sudo pacman -S oath-toolkit

Arch Linux sync databases · oath-toolkit · ソース: geo.mirror.pkgbuild.com

openSUSE zypper確認済み · 92%
sudo zypper install oath-toolkit

openSUSE Tumbleweed package metadata · oath-toolkit · ソース: download.opensuse.org

Debian apt確認済み · 92%
sudo apt install liboath-dev

Debian stable package indexes · liboath-dev · ソース: deb.debian.org

Fedora dnf確認済み · 92%
sudo dnf install liboath

Fedora Rawhide package metadata · liboath · ソース: dl.fedoraproject.org

概要

パッケージ概要

Tools for one-time password authentication systems

コマンドとエイリアス

  • oathtool
  • pskctool

履歴

プロジェクトの歴史と使われ方

OATH Toolkit is a long-running free software implementation of one-time password infrastructure. It provides shared C libraries, the oathtool and pskctool command-line tools, and a pam_oath module for integrating HOTP/TOTP authentication into Unix login stacks.

プロジェクトの歴史

Simon Josefsson introduced the OATH Toolkit publicly in January 2011 as software for OATH one-time password authentication, including oathtool and pam_oath. A May 2011 release announcement for version 1.10.0 points to the Nongnu project page, man pages, PAM documentation, API reference, signed release tarballs, and the Savannah project home.

The toolkit tracks the standards ecosystem around one-time passwords: HOTP from RFC 4226, TOTP from RFC 6238, and PSKC from RFC 6030. Later releases added support for HMAC-SHA256 and HMAC-SHA512 TOTP generation and validation APIs in version 2.6.0, and the project moved version-controlled source hosting to GitLab in version 2.6.2 before moving public Git hosting to Codeberg in version 2.6.13.

採用の歴史

OATH Toolkit spread through Unix package ecosystems because it solved a boring but durable operations problem: generating and validating standard OTP values and adding PAM-based OTP checks to existing systems. The input package record lists apk, Homebrew, Debian, Fedora, MacPorts, Nix, Arch, Ubuntu, and openSUSE package names, reflecting broad distribution rather than a single application community.

使われ方

Developers use liboath when embedding HOTP/TOTP validation in C applications, operators use oathtool for token generation and testing, pskctool handles Portable Symmetric Key Container data, and administrators use pam_oath to require OTP values during PAM authentication. A common deployment stores token records in a usersfile such as /etc/users.oath.

パッケージ好きにとっての重要性

The package is a classic security-toolchain package: small command-line utilities, a C library ABI, a PAM module, man pages, signed source releases, and long-term distro packaging. It also shows how standards-based authentication plumbing ages: compatibility fixes, crypto algorithm additions, build-system maintenance, and security advisories matter as much as new features.

タイムライン

  • 2005: RFC 4226 defined the HOTP algorithm.
  • 2010: RFC 6030 defined PSKC for symmetric key container data.
  • 2011: RFC 6238 defined TOTP.
  • 2011-01-20: Simon Josefsson published an introduction to OATH Toolkit.
  • 2015-05-19: OATH Toolkit 2.6.0 added TOTP support with HMAC-SHA256 and HMAC-SHA512 APIs.
  • 2016-08-27: OATH Toolkit 2.6.2 noted that version-controlled source moved to GitLab.
  • 2024-10-03: OATH Toolkit 2.6.12 addressed CVE-2024-47191 in pam_oath/liboath.
  • 2025-07-29: OATH Toolkit 2.6.13 moved Git hosting to Codeberg.

Related projects

  • OATH Toolkit is directly tied to the OATH HOTP/TOTP standards, Unix PAM, libxmlsec for PSKC-related functionality, and downstream distro packages such as Debian's oathtool/liboath-dev packages.

ソース

セキュリティ状態

リスクレベル: グリーン

narrow executable package without higher-risk signals.

リスク分類器

リスク グリーン · 信頼度 低 · appliance

理由

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 6 個のプラットフォームターゲットで利用できます。
  • 3 件の実行時依存関係とともにインストールされます。
  • ビルドメタデータには 1 件のビルド依存関係があります。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
/etc/users.oath

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
oathtoolcliグローバル実行可能ファイル
pskctoolcliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-10
マネージャ版2.6.14
マネージャ更新日2026-06-27
ローカルデータOK
上流not checked
検出された最新未検出

https://oath-toolkit.codeberg.page/

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:oath-toolkit
バージョン2.6.14
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/oath-toolkit
ホームページhttps://oath-toolkit.codeberg.page/
リポジトリhttps://codeberg.org/oath-toolkit/oath-toolkit
上流ドキュメントhttps://oath-toolkit.codeberg.page/docs.html
ライセンスGPL-3.0-or-later AND LGPL-2.1-or-later
ソースアーカイブhttps://download.savannah.nongnu.org/releases/oath-toolkit/oath-toolkit-2.6.14.tar.gz
最終更新2026-06-27T14:40:16-04:00
Pulseupdated
依存関係libxml2, libxmlsec1, openssl@3
ビルド依存関係pkgconf
Bottle利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameoath-toolkit
Version Scheme0
Revision3
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

liboath-dev 2.6.12-1

Development files for the OATH Toolkit Liboath library

https://www.nongnu.org/oath-toolkit/

sudo apt install liboath-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依存関係
  • normalized package name match
  • 一致条件: Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: liboath-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

liboath0t64 2.6.12-1

OATH Toolkit Liboath library

https://www.nongnu.org/oath-toolkit/

sudo apt install liboath0t64
  • Section: libs
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: liboath0t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libpam-oath 2.6.12-1

OATH Toolkit libpam_oath PAM module

https://www.nongnu.org/oath-toolkit/

sudo apt install libpam-oath
  • Section: admin
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 4 依存関係
  • normalized package name match
  • 一致条件: Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libpam-oath from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libpskc-dev 2.6.12-1

Development files for the OATH Toolkit Libpskc library

https://www.nongnu.org/oath-toolkit/

sudo apt install libpskc-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依存関係
  • normalized package name match
  • 一致条件: Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libpskc-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libpskc0t64 2.6.12-1

OATH Toolkit Libpskc library

https://www.nongnu.org/oath-toolkit/

sudo apt install libpskc0t64
  • Section: libs
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 4 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libpskc0t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

oathtool 2.6.12-1

OATH Toolkit oathtool command line tool

https://www.nongnu.org/oath-toolkit/

sudo apt install oathtool
  • Section: devel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 2 依存関係
  • normalized package name match
  • 一致条件: Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: oathtool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

pskctool 2.6.12-1

OATH Toolkit pskctool command line tool

https://www.nongnu.org/oath-toolkit/

sudo apt install pskctool
  • Section: devel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 2 依存関係
  • normalized package name match
  • 一致条件: Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: pskctool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

oath-toolkit

nix profile install nixpkgs#oath-toolkit
  • normalized package name match
  • 一致条件: Oath Toolkit
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/oa/oath-toolkit/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

liboath-dev 2.6.11-2.1build3

Development files for the OATH Toolkit Liboath library

https://www.nongnu.org/oath-toolkit/

sudo apt install liboath-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依存関係
  • normalized package name match
  • 一致条件: Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: liboath-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

liboath0t64 2.6.11-2.1build3

OATH Toolkit Liboath library

https://www.nongnu.org/oath-toolkit/

sudo apt install liboath0t64
  • Section: libs
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: liboath0t64 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

libpam-oath 2.6.11-2.1build3

OATH Toolkit libpam_oath PAM module

https://www.nongnu.org/oath-toolkit/

sudo apt install libpam-oath
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 4 依存関係
  • normalized package name match
  • 一致条件: Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libpam-oath from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libpskc-dev 2.6.11-2.1build3

Development files for the OATH Toolkit Libpskc library

https://www.nongnu.org/oath-toolkit/

sudo apt install libpskc-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依存関係
  • normalized package name match
  • 一致条件: Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libpskc-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

libpskc0t64 2.6.11-2.1build3

OATH Toolkit Libpskc library

https://www.nongnu.org/oath-toolkit/

sudo apt install libpskc0t64
  • Section: libs
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 4 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libpskc0t64 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

oathtool 2.6.11-2.1build3

OATH Toolkit oathtool command line tool

https://www.nongnu.org/oath-toolkit/

sudo apt install oathtool
  • Section: universe/devel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 2 依存関係
  • normalized package name match
  • 一致条件: Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: oathtool from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

pskctool 2.6.11-2.1build3

OATH Toolkit pskctool command line tool

https://www.nongnu.org/oath-toolkit/

sudo apt install pskctool
  • Section: universe/devel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 2 依存関係
  • normalized package name match
  • 一致条件: Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: pskctool from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

oath-toolkit 2.6.14-r1

OATH Toolkit One-time password components

https://nongnu.org/oath-toolkit/

sudo apk add oath-toolkit
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: oath-toolkit
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Oath Toolkit
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: oath-toolkit from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment