Reverse HOTP support

[szszszsz]

This PR adds support for the reverse HOTP calls, similarly to the tool known as hotp-verification client.

Changes

• add CLI for the reverse HOTP under verify command
• add new credential kind: HOTP_REVERSE, which can only be used with the verify command
• UP requirement support for the credential use
• tests updates

Checklist

• tested with Python3.9
• run make check or make fix for the formatting check
• signed commits
• updated documentation (e.g. parameter description, inline doc, docs.nitrokey)
• added labels

Test Environment and Execution

• OS: Linux Fedora 35
• device's model: NK3 CN, and USB/IP
• device's firmware version:
  • v0.1-6-ge0859b9 Nitrokey/nitrokey-webcrypt-usbip
  • v1.2.2-12-gff88e11 Nitrokey/nitrokey-3-firmware

Relevant Output Example

$ nitropy nk3 otp verify --help                                 
Command line tool to interact with Nitrokey devices 0.4.30                                                         
Usage: nitropy nk3 otp verify [OPTIONS] NAME                                                                       
                                                                                                                   
  Proceed with the incoming OTP code verification (aka reverse HOTP).                                              
                                                                                                                   
Options:                                                                                                           
  --code INTEGER  The code to verify                                                                               
  --help          Show this message and exit.                                                                      
$ nitropy nk3 otp register --help                               
Command line tool to interact with Nitrokey devices 0.4.30                                                         
Usage: nitropy nk3 otp register [OPTIONS] NAME SECRET                                                              
                                                                                                                   
  Register OTP credential.                                                                                         
                                                                                                                   
  Write SECRET under the NAME. SECRET should be encoded in base32 format.                                          
                                                                                                                   
Options:                                                                                                           
  --digits_str [6|8]              Digits count                                                                     
  --kind [HOTP|TOTP|HOTP_REVERSE]                                                                                  
                                  OTP mechanism to use. Case insensitive.                                          
  --hash [SHA1|SHA256]            Hash algorithm to use                                                            
  --counter_start INTEGER         Starting value for the counter (HOTP only)                                       
  --touch_button                  This credential requires button press before                                     
                                  use                                                                              
  --help                          Show this message and exit.                                                      

                                                                    

Connected:

• Reverse HOTP trussed-secrets-app#1
• Support CTAPHID transport trussed-secrets-app#2

[szszszsz]

Ready when you are @robin-nitrokey

[robin-nitrokey]

Code looks good to me, but not tested yet.