Hi,

a customer wants to implement Advanced Authentication and so I am currently checking if we can use some of their already used infrastructure and also apps.
In regard to softwaretoken, they are already using the app "Sophos Intercept X for Mobile".
So I was checking if we can use this app to enroll TOTP and noticed that I need to enable Google authenticator format of QR code.

In the app I could see that has algorithmen is SHA-1.

On the one hand, I tried to check what Google is saying regarding support for SHA-256 and/or SHA-512, but could not find an official statement.
I just found a github Thread (github.com/.../27349) but not more.

On the other hand, I am wondering if OT has more insight and if so, if there are any plans to implement this?

In addition to that, are there any official statements what the own app is using?

Thanks and regards
René