This is OpenPAM's oathkey tool ported to libcryb-oath (which is itself derived from OpenPAM's liboath). Most of its functionality will eventually move into libcryb-otp.