http://www.freeipa.org/page/V4/OTPReplayPrevention The above link contains the design page for our OTP Replay Prevention countermeasures proposal in FreeIPA. Please review. Nathaniel