Automic VaultAutomic Vault

brew

使用 Homebrew, apk, MacPorts, Nix, pacman, zypper, apt, dnf 安装 oath-toolkit

查看 oath-toolkit 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install oath-toolkit

local Homebrew formula metadata

MacPorts已验证 · 94%
sudo port install oath-toolkit

MacPorts ports tree · security/oath-toolkit/Portfile · 来源: api.github.com

Linux

Alpine Linux apk已验证 · 92%
sudo apk add oath-toolkit

Alpine Linux edge package indexes · oath-toolkit · 来源: dl-cdn.alpinelinux.org

Nix已验证 · 92%
nix profile install nixpkgs#oath-toolkit

nixpkgs package indexes · pkgs/by-name/oa/oath-toolkit/package.nix · 来源: api.github.com

Arch Linux pacman已验证 · 92%
sudo pacman -S oath-toolkit

Arch Linux sync databases · oath-toolkit · 来源: geo.mirror.pkgbuild.com

openSUSE zypper已验证 · 92%
sudo zypper install oath-toolkit

openSUSE Tumbleweed package metadata · oath-toolkit · 来源: download.opensuse.org

Debian apt已验证 · 92%
sudo apt install liboath-dev

Debian stable package indexes · liboath-dev · 来源: deb.debian.org

Fedora dnf已验证 · 92%
sudo dnf install liboath

Fedora Rawhide package metadata · liboath · 来源: dl.fedoraproject.org

概览

软件包摘要

Tools for one-time password authentication systems

命令和别名

  • oathtool
  • pskctool

历史

项目历史与用法

OATH Toolkit is a long-running free software implementation of one-time password infrastructure. It provides shared C libraries, the oathtool and pskctool command-line tools, and a pam_oath module for integrating HOTP/TOTP authentication into Unix login stacks.

项目历史

Simon Josefsson introduced the OATH Toolkit publicly in January 2011 as software for OATH one-time password authentication, including oathtool and pam_oath. A May 2011 release announcement for version 1.10.0 points to the Nongnu project page, man pages, PAM documentation, API reference, signed release tarballs, and the Savannah project home.

The toolkit tracks the standards ecosystem around one-time passwords: HOTP from RFC 4226, TOTP from RFC 6238, and PSKC from RFC 6030. Later releases added support for HMAC-SHA256 and HMAC-SHA512 TOTP generation and validation APIs in version 2.6.0, and the project moved version-controlled source hosting to GitLab in version 2.6.2 before moving public Git hosting to Codeberg in version 2.6.13.

采用历史

OATH Toolkit spread through Unix package ecosystems because it solved a boring but durable operations problem: generating and validating standard OTP values and adding PAM-based OTP checks to existing systems. The input package record lists apk, Homebrew, Debian, Fedora, MacPorts, Nix, Arch, Ubuntu, and openSUSE package names, reflecting broad distribution rather than a single application community.

使用方式

Developers use liboath when embedding HOTP/TOTP validation in C applications, operators use oathtool for token generation and testing, pskctool handles Portable Symmetric Key Container data, and administrators use pam_oath to require OTP values during PAM authentication. A common deployment stores token records in a usersfile such as /etc/users.oath.

为什么软件包爱好者会关心

The package is a classic security-toolchain package: small command-line utilities, a C library ABI, a PAM module, man pages, signed source releases, and long-term distro packaging. It also shows how standards-based authentication plumbing ages: compatibility fixes, crypto algorithm additions, build-system maintenance, and security advisories matter as much as new features.

时间线

  • 2005: RFC 4226 defined the HOTP algorithm.
  • 2010: RFC 6030 defined PSKC for symmetric key container data.
  • 2011: RFC 6238 defined TOTP.
  • 2011-01-20: Simon Josefsson published an introduction to OATH Toolkit.
  • 2015-05-19: OATH Toolkit 2.6.0 added TOTP support with HMAC-SHA256 and HMAC-SHA512 APIs.
  • 2016-08-27: OATH Toolkit 2.6.2 noted that version-controlled source moved to GitLab.
  • 2024-10-03: OATH Toolkit 2.6.12 addressed CVE-2024-47191 in pam_oath/liboath.
  • 2025-07-29: OATH Toolkit 2.6.13 moved Git hosting to Codeberg.

Related projects

  • OATH Toolkit is directly tied to the OATH HOTP/TOTP standards, Unix PAM, libxmlsec for PSKC-related functionality, and downstream distro packages such as Debian's oathtool/liboath-dev packages.

来源

安全态势

风险级别：绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 安装时包含 3 个运行时依赖。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
/etc/users.oath

可执行文件

已安装的可执行文件

命令类型暴露范围备注
oathtoolcli全局可执行文件
pskctoolcli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-07-25
管理器版本2.6.14
管理器更新时间2026-06-27
本地数据OK
上游not checked
检测到的最新版本未检测到

https://oath-toolkit.codeberg.page/

安装元数据

软件包元数据

软件包键brew:oath-toolkit
版本2.6.14
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/oath-toolkit
主页https://oath-toolkit.codeberg.page/
仓库https://codeberg.org/oath-toolkit/oath-toolkit
上游文档https://oath-toolkit.codeberg.page/docs.html
许可证GPL-3.0-or-later AND LGPL-2.1-or-later
源码归档https://download.savannah.nongnu.org/releases/oath-toolkit/oath-toolkit-2.6.14.tar.gz
最后更新2026-06-27T14:40:16-04:00
Pulseupdated
依赖libxml2, libxmlsec1, openssl@3
构建依赖pkgconf
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameoath-toolkit
Version Scheme0
Revision3
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Debian apt95%

liboath-dev 2.6.12-1

Development files for the OATH Toolkit Liboath library

https://www.nongnu.org/oath-toolkit/

sudo apt install liboath-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依赖
  • normalized package name match
  • 匹配方式：Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: liboath-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

liboath0t64 2.6.12-1

OATH Toolkit Liboath library

https://www.nongnu.org/oath-toolkit/

sudo apt install liboath0t64
  • Section: libs
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: liboath0t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libpam-oath 2.6.12-1

OATH Toolkit libpam_oath PAM module

https://www.nongnu.org/oath-toolkit/

sudo apt install libpam-oath
  • Section: admin
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 4 依赖
  • normalized package name match
  • 匹配方式：Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libpam-oath from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libpskc-dev 2.6.12-1

Development files for the OATH Toolkit Libpskc library

https://www.nongnu.org/oath-toolkit/

sudo apt install libpskc-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依赖
  • normalized package name match
  • 匹配方式：Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libpskc-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libpskc0t64 2.6.12-1

OATH Toolkit Libpskc library

https://www.nongnu.org/oath-toolkit/

sudo apt install libpskc0t64
  • Section: libs
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 4 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libpskc0t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

oathtool 2.6.12-1

OATH Toolkit oathtool command line tool

https://www.nongnu.org/oath-toolkit/

sudo apt install oathtool
  • Section: devel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 2 依赖
  • normalized package name match
  • 匹配方式：Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: oathtool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

pskctool 2.6.12-1

OATH Toolkit pskctool command line tool

https://www.nongnu.org/oath-toolkit/

sudo apt install pskctool
  • Section: devel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 2 依赖
  • normalized package name match
  • 匹配方式：Oath Toolkit
Debian stable package indexes · deb.debian.org · Debian stable package indexes: pskctool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

oath-toolkit

nix profile install nixpkgs#oath-toolkit
  • normalized package name match
  • 匹配方式：Oath Toolkit
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/oa/oath-toolkit/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

liboath-dev 2.6.11-2.1build3

Development files for the OATH Toolkit Liboath library

https://www.nongnu.org/oath-toolkit/

sudo apt install liboath-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依赖
  • normalized package name match
  • 匹配方式：Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: liboath-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

liboath0t64 2.6.11-2.1build3

OATH Toolkit Liboath library

https://www.nongnu.org/oath-toolkit/

sudo apt install liboath0t64
  • Section: libs
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: liboath0t64 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

libpam-oath 2.6.11-2.1build3

OATH Toolkit libpam_oath PAM module

https://www.nongnu.org/oath-toolkit/

sudo apt install libpam-oath
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 4 依赖
  • normalized package name match
  • 匹配方式：Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libpam-oath from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libpskc-dev 2.6.11-2.1build3

Development files for the OATH Toolkit Libpskc library

https://www.nongnu.org/oath-toolkit/

sudo apt install libpskc-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 1 依赖
  • normalized package name match
  • 匹配方式：Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libpskc-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

libpskc0t64 2.6.11-2.1build3

OATH Toolkit Libpskc library

https://www.nongnu.org/oath-toolkit/

sudo apt install libpskc0t64
  • Section: libs
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 4 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libpskc0t64 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

oathtool 2.6.11-2.1build3

OATH Toolkit oathtool command line tool

https://www.nongnu.org/oath-toolkit/

sudo apt install oathtool
  • Section: universe/devel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 2 依赖
  • normalized package name match
  • 匹配方式：Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: oathtool from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

pskctool 2.6.11-2.1build3

OATH Toolkit pskctool command line tool

https://www.nongnu.org/oath-toolkit/

sudo apt install pskctool
  • Section: universe/devel
  • Architecture: amd64
  • Source Package: oath-toolkit
  • 2 依赖
  • normalized package name match
  • 匹配方式：Oath Toolkit
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: pskctool from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

oath-toolkit 2.6.14-r1

OATH Toolkit One-time password components

https://nongnu.org/oath-toolkit/

sudo apk add oath-toolkit
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: oath-toolkit
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Oath Toolkit
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: oath-toolkit from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

相关工具

  • libxml2Runtime dependency declared by Homebrew.
  • libxmlsec1Runtime dependency declared by Homebrew.
  • openssl@3Runtime dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.

相同工作流

  • linux-pamShares av.db curated category or tags: authentication, cli, pam, security.
  • totp-cliShares av.db curated category or tags: authentication, cli, otp, security, totp.
  • cotpShares av.db curated category or tags: authentication, cli, hotp, security, totp.
  • cyrus-saslShares av.db curated category or tags: authentication, cli, security.
  • duo_unixShares av.db curated category or tags: authentication, cli, pam, security.
  • google-authenticator-libpamShares av.db curated category or tags: authentication, cli, pam, security, totp.

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment