The verifier SHALL use approved encryption and an authenticated guarded channel when gathering the OTP in an effort to offer resistance to eavesdropping and MitM assaults. Time-centered OTPs [RFC 6238] SHALL have a defined life time that is decided with the predicted clock drift — in either