hmac hashes help understanding

[Hashpup2222]

from Crypto.Hash import HMAC
secret_key='secret'
message='message'
h=HMAC.new(secret_key)
h.update(message)
print h.hexdigest()

python hmac_example.py

7e0d0767775312154ba16fd3af9771a2 <<<------------- HASH

how can i use the hash verifier, with HMAC

is it
7e0d0767775312154ba16fd3af9771a2:secret

or
7e0d0767775312154ba16fd3af9771a2:message

because im not finding success on verifying and additionally can HMAC be cracked?

 

[nick8606]

Paste to verifier
7e0d0767775312154ba16fd3af9771a2:secret:message
and select algorithm HMAC-MD5 (KEY = $SALT)

 

[Hashpup2222]

awesome thanks THAT WORKED, is there like a real world scenario you can help me understand with HMAC, if we were to communicate using HMAC hashes, I send you a "message" & "hash" and via email, then I call you over the phone then i give you a the "secret_key" , is that how people are using this?

you then verify the hash, how are you quickly going to verify this? what are others doing you think, thanks!

 

[nick8606]

Do you want to know theory?
All answers are here:
https://en.wikipedia.org/wiki/HMAC
https://www.google.com/search?q=using+HMAC+for+authentication

 

[Hashpup2222]

the key exchange to the communicating parties, who are responsible for establishing and using a trusted channel to agree on the key prior to communication.

Instead, the message (encrypted or not) must be sent alongside the HMAC hash. Parties with the secret key will hash the message again themselves, and if it is authentic, the received and computed hashes will match.

 

[Hashpup2222]

i changed the HMAC in the python script to a few other HASHES, this isn't my script i found it in a learning book, but it seems like the script just using secret_key for a SALT and message for a PLAINTEXT.

 

[Hashpup2222]

Paste to verifier
7e0d0767775312154ba16fd3af9771a2:secret:message
and select algorithm HMAC-MD5 (KEY = $SALT)

-m 22000 WPA-PBKDF2-PMKID+EAPOL
27860a02f8f18dc5ddf07c526cda640a:f0edb8c7ebb8:a436c74760ea:Prerna:Pihu@1999

does the hash verify tool work with this above hash? thanks nick!

 

[Dawbs]

-m 22000 WPA-PBKDF2-PMKID+EAPOL
27860a02f8f18dc5ddf07c526cda640a:f0edb8c7ebb8:a436c74760ea:Prerna:Pihu@1999

does the hash verify tool work with this above hash? thanks nick!

What happened when you tried it?

 

[Hashpup2222]

27860a02f8f18dc5ddf07c526cda640a:f0edb8c7ebb8:a436c74760ea:Prerna:Pihu@1999

Verify found hashes

Verify, prove and share that you found specific hashes

hashes.com

WPA-PMKID-PBKDF2
No valid hashes were submitted

 

[174region174]

27860a02f8f18dc5ddf07c526cda640a:f0edb8c7ebb8:a436c74760ea:Prerna:Pihu@1999

Verify found hashes

Verify, prove and share that you found specific hashes

hashes.com

WPA-PMKID-PBKDF2
No valid hashes were submitted

You will not be able to confirm this password and hash there. 22000 | WPA-PBKDF2-PMKID+EAPOL
16800 | WPA-PMKID-PBKDF2

 

[A1131]

Or put it back on the shelf of things not done...

 

[A1131]

You will sleep better if you don't think so much about programming...trust me

 

[A1131]

If you know a language...build your paths boldly...but always remember the obstacles that are in your way in the form of the state, borders or even my body which smiles when it likes. We understand each other partly. Good luck friends.

 

[A1131]

You will sleep better if you don't think so much about programming...trust me

Why are you laughing at me @freerote. I don't know how to program and I won't learn anymore. Sometimes I think ... yes I am only real on this forum...sacred you might say.

 

[Hashpup2222]

Why are you laughing at me @freerote. I don't know how to program and I won't learn anymore. Sometimes I think ... yes I am only real on this forum...sacred you might say.

kids dont do drugs

 

[A1131]

kids dont do drugs

Are you sure?

 

[Hashpup2222]

Are you sure?

HIV POSITIVE

 

[A1131]

HIV POSITIVE

That's right not so negative