Implementation of AES-128 and TOTP to Enhance Single Sign-On Authentication (Case Study: SSO of the St. Pius X Parish Application, Bengkayang)

Abstract

Single Sign-On (SSO) is an authentication technique that utilizes a single account to access resources across various application services. This technique enhances the user authentication experience by eliminating the need to remember multiple passwords. However, SSO systems are still vulnerable to authentication attacks such as dictionary attacks and rainbow table attacks. This study focuses on the SSO system of the St. Pius X Parish Application in Bengkayang. Based on primary data, the existing authentication system lacks two-factor authentication (2FA) and still uses the MD5 hashing method for password storage. To enhance authentication in the SSO system, this research implements two-factor authentication (2FA) and the AES-128 cryptographic algorithm, by encrypting the token and utilizing Time-based One-Time Password (TOTP) for second-factor
authentication. In the stage of generating a unique six-digit code, the TOTP technique provides a time-based code after the user completes the OAuth process, with a time interval of 30 seconds and a maximum of five attempts. This process is developed using the TypeScript programming language and the Next.js framework. The JWT token encryption process is executed in 11 rounds, consisting of initial rounds, main rounds, and final rounds, with key expansion carried out in each round of the AES-128 algorithm, resulting in ciphertext. The implementation of the TOTP and AES-128 methods contributes to strengthening the authentication system of the SSO application, providing protection against token hijacking attacks.