Penerapan algoritma RSA dan EdDSA dengan metode hybrid-signature untuk keamanan dokumen digital

Adam, Raihan (2026) Penerapan algoritma RSA dan EdDSA dengan metode hybrid-signature untuk keamanan dokumen digital. Sarjana thesis, UIN Sunan Gunung Djati Bandung.

	Text (COVER) 1_cover.pdf Download (201kB)
	Text (ABSTRAK) 2_abstrak.pdf Download (251kB)
	Text 3_skbebasplagiarism.pdf Download (861kB)
	Text 4_daftarisi.pdf Download (245kB)
	Text (BAB I) 5_bab1.pdf Download (519kB)
	Text (BAB II) 6_bab2.pdf Restricted to Registered users only Download (602kB) | Request a copy
	Text (BAB III) 7_bab3.pdf Restricted to Registered users only Download (676kB) | Request a copy
	Text (BAB IV) 8_bab4.pdf Restricted to Registered users only Download (611kB) | Request a copy
	Text (BAB V) 9_bab5.pdf Restricted to Registered users only Download (226kB) | Request a copy
	Text (DAFTAR ISI) 10_daftarpustaka.pdf Restricted to Registered users only Download (230kB) | Request a copy
	Text (LAMPIRAN) 11_lampiran.pdf Restricted to Repository staff only Download (936kB) | Request a copy

Abstract

INDONESIA: Ancaman terhadap integritas dan otentikasi dokumen digital, seperti pemalsuan dan manipulasi data, semakin meningkat di era digital saat ini. Meskipun standar industri seperti PAdES dan XAdES telah tersedia, penerapannya pada skala internal menimbulkan kendala teknis, yaitu keharusan menanamkan tanda tangan langsung ke struktur fisik dokumen sehingga mengubah nilai hash asli dan menyulitkan validasi berbasis konten (content-based hashing). Penelitian ini mengusulkan pendekatan alternatif berupa metode hybrid-signature yang menggabungkan RSA dan EdDSA pada lapisan metadata dokumen, dilengkapi indikator visual tanda tangan pada struktur fisik dokumen, tanpa memodifikasi konten utama yang menjadi basis perhitungan content-based hash. Private key pengguna disimpan terenkripsi melalui skema envelope encryption menggunakan Argon2id dan AES-256-GCM sehingga tidak perlu diunduh secara manual. Sistem dirancang menggunakan kerangka Design Science Research Methodology (DSRM) dan diimplementasikan pada dokumen PDF, DOCX, dan XLSX dalam skenario distribusi internal (closed-loop). Untuk mencegah replay attack, sistem membentuk payload unik melalui konkatenasi document_id dan document_hash sebelum proses penandatanganan dilakukan. Pengujian fungsionalitas menggunakan metode black-box testing menunjukkan bahwa sistem berhasil mendeteksi manipulasi konten, penghapusan metadata, replay attack, serta penandatanganan dengan kunci yang dicabut. Hasil pengujian kinerja menunjukkan bahwa algoritma RSA memiliki durasi signing pada rentang 0,76-1,99 milisekon, sedangkan EdDSA berada pada rentang 0,02-0,30 milisekon; verifikasi kedua algoritma berada pada rentang 0,05-0,20 milisekon. Evaluasi storage overhead menunjukkan penambahan ukuran file relatif kecil dan konstan, terutama pada dokumen berukuran besar. Hasil penelitian ini menunjukkan bahwa pendekatan metadata embedding dengan hybrid-signature merupakan solusi efektif dan efisien untuk menjamin otentikasi serta integritas dokumen digital dalam lingkungan internal tanpa merusak struktur fisik file aslinya. ENGLISH: Threats to the integrity and authenticity of digital documents, such as forgery and manipulation, are increasingly common in the digital era. Although industry standards like PAdES and XAdES are widely used, applying them in internal environments poses technical challenges, since signature data is embedded directly into the document's physical structure, altering the original hash and complicating content-based validation. This research proposes an alternative approach: a hybrid-signature method combining RSA and EdDSA on the document's metadata layer, complemented by a visual signature indicator on the physical structure, without modifying the core content used to compute the content-based hash. The user's private key is stored encrypted through envelope encryption using Argon2id and AES-256-GCM, eliminating manual key download and management. The system was designed using the Design Science Research Methodology (DSRM) and implemented for PDF, DOCX, and XLSX documents within a closed-loop internal distribution scenario. To prevent replay attacks, the system builds a unique payload by concatenating document_id and document_hash before signing. Black-box testing showed the system successfully detected content manipulation, metadata removal, replay attacks, and signing with revoked keys. Performance testing showed RSA signing durations of 0.76-1.99 ms, while EdDSA ranged from 0.02 to 0.30 ms; verification for both algorithms ranged from 0.05 to 0.20 ms. Storage overhead evaluation showed a relatively small, constant increase in file size, particularly negligible for larger documents. These findings indicate that the metadata embedding approach combined with hybrid-signature effectively and efficiently ensures the authentication and integrity of digital documents in internal environments without compromising the original file structure.

Item Type:	Thesis (Sarjana)
Uncontrolled Keywords:	content-based hashing; digital signature; EdDSA; hybrid-signature; keamanan dokumen digital; metadata dokumen;RSA;digital document security;document metadata;
Subjects:	Data Processing, Computer Science Data Processing, Computer Science > Systems Analysis and Computer Design
Divisions:	Fakultas Sains dan Teknologi > Program Studi Teknik Informatika
Depositing User:	Raihan Adam
Date Deposited:	08 Oct 2026 07:58
Last Modified:	09 Oct 2026 02:26
URI:	https://digilib.uinsgd.ac.id/id/eprint/143929

Actions (login required)

View Item