Performance comparison of signed algorithms on JSON Web Token

1st Siliwangi International Conference on Innovation in Research 2018

Rahmatulloh, A.^1 ; Gunawan, R.^1 ; Nursuwars, F.M.S.^1

Department of Informatics, Siliwangi University, Jln. Siliwangi No. 24, Tasikmalaya

46155, Indonesia^1

关键词: Average values;    Digital era;    Multiple platforms;    Performance comparison;    Security of authentication;    Signing algorithm;   

Others  :  https://iopscience.iop.org/article/10.1088/1757-899X/550/1/012023/pdf
DOI  :  10.1088/1757-899X/550/1/012023

来源: IOP

【 摘 要 】

The system survive in this digital era is a system that can work on multiple platforms, the use of web services is one of the solution. Exchange data using JSON format and for the security of authentication using JSON Web Token (JWT). The importance of token-based authentication using JWT on web services can solve interoperability problems. JWT is stateless and can include information in the token authorization. JWT has several options for using algorithms namely HMAC, RSA, and ECDSA. Unfortunately, it is unknown which algorithm has better performance. Here, we directly tested the signing algorithm in the three algorithms seen from several parameters. The experimental results showed the use of HMAC algorithm produces an average value of token-generating time is 21.3 s, token size 109 bytes and data transfer token speed 91.2 s. It was considered that the HMAC had an excellent performance.