import csv
import itertools
from collections import OrderedDict
import hashlib

with open ('code.csv', 'r') as input_file_name:
    reader=csv.reader(input_file_name)
    key=[]
    val1=[]
    for row in reader:
        name = row[0]
        val=[str(num) for num in row[1:]]
        key.append(name)
        val1.append(val)
        value = list(itertools.chain.from_iterable(val1)) #making a simple list from list of list in value
        value=[str(i) for i in value]
    print(key)
    dictionary = dict(zip(key, value))
print(dictionary)

Quote:peter,99b057c8e3461b97f8d6c461338cf664bc84706b9cc2812daaebf210ea1b9974
adam,85432a9890aa5071733459b423ab2aff9f085f56ddfdb26c8fae0c2a04dce84c

Quote:peter,5104
adam,9770

hashlib.sha256("a".encode('utf-8')).hexdigest()

Quote:<sha256 HASH object @ 0x00000246AA5E1DC8>

#for  peter,5104
import hashlib

def encrypt_string(hash_string):
    sha_signature = \
        hashlib.sha256(hash_string.encode()).hexdigest()
    return sha_signature
hash_string = '5104'
sha_signature = encrypt_string(hash_string)
print(sha_signature)

Quote:99b057c8e3461b97f8d6c461338cf664bc84706b9cc2812daaebf210ea1b9974

(May-07-2019, 11:56 AM)go127a Wrote: So I should make a hash in a for loop from 1000 to 9999 and check them with the values, that I have gathered from the csv file?

import hashlib
keyhash=[]
valhash=[]
for i in range (1000,9999):
    keyhash.append(i)
    itemstr=str(i)
    val1=hashlib.sha256(itemstr.encode()).hexdigest()
    valhash.append(val1)
    dichashlib=dict(zip(keyhash, valhash))

import hashlib

rainbow_dict = {}
for i in range(1000, 10000): # note you need upper end to be 10000 in odrder to include 9999
    my_hash = hashlib.sha256(str(i).encode()).hexdigest()
    rainbow_dict[my_hash] = i

# or replace lines 3-7 with a single line    
#rainbow_dict = {hashlib.sha256(str(i).encode()).hexdigest():i for i in range(1000, 10000)}
 
# sample with 3 random hashes 
passwords = ['c56b05eb525718f02df539e071361dd58b168a5a70abdb3148d44f98c46c38cd',
             'f476ef220e571593579ae60582fe52a888309b21d4a01cf1cd56a14084d9db27',
             '1828526428f17576e6581a0b9c893ecf79c1fdc20f495f0bdc98b559b25b92a6']
          
for password_hash in passwords:
    print(f'{password_hash} --> {rainbow_dict[password_hash]}')
    
print(hashlib.sha256('2523'.encode()).hexdigest() == passwords[0])

Quote:dict_csv={'danial': '99b057c8e3461b97f8d6c461338cf664bc84706b9cc2812daaebf210ea1b9974', 'peter': '85432a9890aa5071733459b423ab2aff9f085f56ddfdb26c8fae0c2a04dce84c'}

listval=[]
for item in dict_csv.values():
    listval.append(item)
list1=[k for k,v in dict_csv.items() if v in listval]
#print(list1)
list2=[v for k,v in rainbow_dict.items() if k in listval]
#print(list2)
list3 = [ item for pair in zip(list1, list2 + [0]) for item in pair]
print(list3)

Quote:['danial', 5104, 'peter', 9770]

Quote:danial,5104
peter,9770

1. The password is submitted as clear text to the server (ssl should used, if it's on the web)
   
2. The server receives the password in clear text
   
3. The server creates a new string, based on the clear text password and a random generated *salt
   
4. The new string is hashed with a good algorithm. sha256 is ok. Md5 is not ok.
   
5. The hash is stored in the database or somewhere else. The clear text password is thrown away.
   

1. Client submits the clear text password to the server (don't forget transport encryption).
   
2. The server generates the hash value on same way, as it was stored before. The hash value is based on the concatenated password and salt.
   
3. The server knows the requested identity(Username or E-Mail) and loads the hash value from the database.
   
4. The server compares the crated hash value with the hash value from the database. (Timing attacks)
   
5. If both strings are equal, the password was the right one.