1 files changed, 46 insertions, 0 deletions
diff --git a/docs/hazmat/oath/hotp.rst b/docs/hazmat/oath/hotp.rst
new file mode 100644
index 00000000..d84f5bdf
--- /dev/null
+++ b/docs/hazmat/oath/hotp.rst
@@ -0,0 +1,46 @@
+.. hazmat::
+
+HMAC-Based One-Time Password Algorithm
+======================================
+
+.. currentmodule:: cryptography.hazmat.oath.hotp
+
+This module contains functions for generating and verifying one time password
+values based on Hash-based message authentication codes (HMAC).
+
+.. class:: HOTP(secret, length, backend)
+
+    HOTP objects take a ``secret`` and ``length`` parameter. The ``secret``
+    should be randomly generated bytes and is recommended to be 160 bits in
+    length. The ``length`` parameter controls the length of the generated
+    one time password and is recommended to be at least a 6 digit value.
+
+    This is an implementation of :rfc:`4226`.
+
+    .. doctest::
+
+        >>> from cryptography.hazmat.backends import default_backend
+        >>> from cryptography.hazmat.oath.hotp import HOTP
+        >>> hotp = HOTP(secret, 6, backend=default_backend)
+        >>> hotp.generate(0)
+        958695
+        >>> hotp.verify("958695", 0)
+        True
+
+    :param secret: Secret key as ``bytes``.
+    :param length: Length of generated one time password as ``int``.
+    :param backend: A
+        :class:`~cryptography.hazmat.backends.interfaces.HMACBackend`
+        provider.
+
+    .. method:: generate(counter)
+
+        :param counter: The counter value used to generate the one time password.
+        :return: A one time password value.
+
+    .. method:: verify(hotp, counter)
+
+        :param hotp: The one time password value to validate.
+        :param counter: The counter value to validate against.
+        :return: ``True`` if the one time password value is valid. ``False`` if otherwise.
+