Performance comparison of signed algorithms on JSON Web Token

Abstract

The system survive in this digital era is a system that can work on multiple platforms, the use of web services is one of the solution. Exchange data using JSON format and for the security of authentication using JSON Web Token (JWT). The importance of token-based authentication using JWT on web services can solve interoperability problems. JWT is stateless and can include information in the token authorization. JWT has several options for using algorithms namely HMAC, RSA, and ECDSA. Unfortunately, it is unknown which algorithm has better performance. Here, we directly tested the signing algorithm in the three algorithms seen from several parameters. The experimental results showed the use of HMAC algorithm produces an average value of token-generating time is 21.3 s, token size 109 bytes and data transfer token speed 91.2 s. It was considered that the HMAC had an excellent performance.

Rancang Bangun Library Web Token untuk Enkripsi HTTP Data Menggunakan Eksklusif-OR (XOR)

“…Tahap implementasi adalah tahap mengeksekusi rencana untuk mencapai tujuan-tujuan yang telah ditetapkan. Proses implementasi dilakukan untuk menerapkan rancangan sistem yang telah dirancang agar dapat berubah sesuatu yang dapat menyelesaikan masalah dan memenuhi kebutuhan yang ada di latar belakang (Ahmed, 2019;Rahmatulloh, 2019). Proses implementasi ini penulisan disajikan dengan pseudocode dengan tujuan memudahkan dalam memahami alur pembuatan program yang menerapkan XOR dan fungsi hashing.…”

Implementation of JSON Web Token on Authentication with HMAC SHA-256 Algorithm

“…Teknologi JWT akan bekerja dalam meningkatkan keamanan authentication system sehingga user merasa aman dalam menggunakan sistem tersebut. Selain itu, teknologi JWT akan bekerja dengan algoritma HMAC SHA-256 [6] sebagai penyokong sistem agar menghasilkan fungsi hash spesifik yang tidak terbaca.…”

Digital platform based on geomarketing as an improvement in micro and small enterprises

“…For security reasons, version 3 of recaptcha was used, which allows robotic agents to attack and make the registration platform unavailable. To enforce this measure, JSON web token (JWT) [29] was used to give access to the services deployed in the API REST. The applications also use the function of sending notification messages.…”