A Comparative Study MD5 and SHA1 Algorithms to Encrypt REST API Authentication on Mobile-based Application

Abstract

Mobile-based applications that use the Client-Server system certainly require an Application Programming Interface (API) as an intermediary to communicate with each other. Security is important for communication over the network and to provide security one can use encryption methods which are implemented in Representational State Transfer (REST) API authentication. Message Digest 5 (MD5) and Secure Hashing Algorithm 1 (SHA1) encryption are algorithms that are often used in this case. This study aims to examine the performance of the two algorithms. The Wireshark application is used to retrieve authentication data. Authentication data is still encrypted, then tested by Brute Force Attack using Hashcat tools. In addition, each algorithm is measured in terms of the time needed for the REST API Authentication process, which uses the Postman application. Based on Brute Force Attack testing the SHA1 encryption algorithm has the advantage of being stronger, but the time needed for encryption is slower when compared to the MD5 algorithm. Even though it's more tethered, the difference in encryption time needed is only 37.1 ms, so that SHA1 is still considered relevant for implementing security systems and REST API authentication on a mobile application.