RFC 6238 allows HMAC-SHA256/SHA512. Rare in the wild but appearing. The vault format already reserves algorithm ids 1/2 for them (docs/VAULT_FORMAT.md), so this is new primitives + otpauth algorithm= parsing + dispatch — no format change. From docs/ROADMAP.md v2 candidates.
RFC 6238 allows HMAC-SHA256/SHA512. Rare in the wild but appearing. The vault format already reserves
algorithmids 1/2 for them (docs/VAULT_FORMAT.md), so this is new primitives + otpauthalgorithm=parsing + dispatch — no format change. From docs/ROADMAP.md v2 candidates.