Development of a Digital Signature System for Electronic Certification Services Based on Public Key Infrastructure

Diaz Seno Hutomo; Wakhid Kurniawan

doi:10.32664/smatika.v16i02.2348

Authors

Diaz Seno Hutomo Muhammadiyah University of Karanganyar
Wakhid Kurniawan Muhammadiyah University of Karanganyar

DOI:

https://doi.org/10.32664/smatika.v16i02.2348

Keywords:

Digital Certification, Go, Public Key Infrastructure, RSA Algorithm, SHA-256 Hash

Abstract

Digital transformation in the modern era shifts documents from physical to electronic formats, improving administrative efficiency but simultaneously introducing new vulnerabilities like identity fraud, content manipulation, and signature repudiation. To mitigate these risks, this research successfully designs a robust digital certification service system ensuring data integrity, sender authenticity, and non-repudiation. The methodology adopted an experimental observational approach through software development based on the Waterfall model. It was evaluated using thirty PDF certification documents on a server environment running Go 1.26, an AMD Ryzen 7 4700 processor, and 16 GB RAM. The system architecture integrates a React.js frontend for visual interaction and a Golang backend focused purely on cryptographic computation. Its security infrastructure employs a Public Key Infrastructure (PKI) model, integrating the 2048-bit RSA algorithm for asymmetric key encryption and SHA-256 for document identity hashing. Testing revealed the signature placement mechanism succeeded with an average single-signature execution time of 8.05 ms, displaying zero failures across all documents. Employing binary byte structure analysis and the Force Binary Download method successfully eliminated false positive anomalies caused by browser metadata modifications, which were independently validated via OpenSSL and Python scripts in Google Colab. In conclusion, this electronic certification service platform effectively facilitates real-time document verification, provides absolute protection of data integrity, and ensures the validity of authentication in accordance with Indonesian legal standards for electronic transactions.

References

[1] N. Grataridarga, M. U. Noor, and W. Mardiati, “Digitalisasi Arsip Administrasi Uji Sertifikasi Kompetensi di Lembaga Sertifikasi Profesi Universitas,” J. Vokasi Indones., vol. 10, no. 1, pp. 26–36, 2023, doi: 10.7454/jvi.v10i1.1176.

[2] L. Firdaus, N. Hayaty, and A. Uperiati, “Penerapan Kombinasi Algoritma Advanced Encryption Standard (AES) dan ElGamal dengan Fungsi Secure Hash Algorithm (SHA) dalam Penyandian File Dokumen,” J. Sustain. J. Has. Penelit. dan Ind. Terap., vol. 11, no. 1, pp. 34–43, 2022.

[3] R. R. A. Sodiqin, “Prinsip Jaminan Hukum sebagai Jaminan Sertifikasi Tanda Tangan Elektronik,” Pres. J. Hukum, Adm. Negara, dan Kebijak. Publik, vol. 1, no. 2, pp. 13–23, 2024, doi: 10.62383/presidensial.v1i2.30.

[4] A. H. HR, M. Khudzaifah, and M. N. Jauhari, “Implementasi Fungsi Hash MD5 dan Kriptografi Algoritma RSA pada Pembuatan Tanda Tangan Digital,” J. Ris. Mhs. Mat., vol. 1, no. 2, pp. 51–63, 2021, doi: 10.18860/jrmm.v1i2.13992.

[5] N. Nurdin, A. Habbal, and F. Fajriana, “Comparative Analysis of MD5 and SHA-256 Hash Algorithms for Fingerprint File Integrity Verification,” J. Appl. Informatics Comput., vol. 10, no. 2, pp. 1495–1504, 2026, doi: 10.30871/jaic.v10i2.12432.

[6] A. R. Harahap and T. A. Salim, “Sistem Kriptografi pada Pengamanan Autentikasi Dokumen Elektronik: Systematic Literature Review,” Khazanah J. Pengemb. Kearsipan, vol. 16, no. 2, pp. 203–220, 2023, doi: 10.22146/khazanah.81893.

[7] S. M. Yacub, R. Ramadi, and D. Ernawati, “Public Key Infrastructure: Kerangka Validasi yang Disempurnakan,” TRIPLE A J. Pendidik. Teknol. Inf., vol. 1, no. 2, pp. 77–80, 2023.

[8] S. Bahri, M. Zeinudin, and M. Munir, “Recognition of Electronic Signatures in Proving Civil Procedure Law in Indonesia,” Int. J. Law, Crime Justice, vol. 1, no. 3, pp. 63–81, 2024, doi: 10.62951/ijlcj.v1i3.131.

[9] F. Nazran, H. Purba, O. K. Saidin, and M. Kaban, “Legal Protection of Notaries in Document Validation Through Technology-Based Systems: A Comparative Legal Review of Indonesia, the United States, the Netherlands, and Australia,” J. Ecohumanism, vol. 3, no. 7, 2024, doi: 10.62754/joe.v3i7.4608.

[10] H. Indriyawati, T. Winarti, and V. Vydia, “Web-Based Document Certification System with Advanced Encryption Standard Digital Signature,” Sci. J. Informatics, vol. 8, no. 1, pp. 89–96, 2021, doi: 10.11591/ijeecs.v22.i1.pp516-521.

[11] S. Mubarak, S. Zauhar, Suryadi, and E. Setyowati, “Impacts and Constraints on Implementing E-Certification Policies in Indonesia,” Kasetsart J. Soc. Sci., vol. 43, no. 3, pp. 683–690, 2022, doi: 10.34044/j.kjss.2022.43.3.20.

[12] S. Xenitellis, The Open-source PKI Book: A Guide to PKI and Open-source Implementations. OpenCA Project, 2020.

[13] A. E. Mane, Y. Chihab, and R. Korchiyne, “Digital Signature for Data and Documents Using Operating PKI Certificates,” in SHS Web of Conferences, 2021, p. 6002. doi: 10.1051/shsconf/202111907004.

[14] A. Setiawan, Y. Alexandro, and J. Parhusip, “Analisis Distribusi Rata-rata Waktu Respon Aplikasi Berbasis Web Menggunakan Kurva Normal dan Simpangan Baku,” J. Inform. dan Komput., vol. 10, no. 1, pp. 45–52, 2025, doi: 10.36040/jati.v9i1.12176.

[15] W. T. Song, G. Zeng, W. Z. Zhang, and D. H. Tang, “Research on Privacy Information Retrieval Model Based on Hybrid Homomorphic Encryption,” Cybersecurity, vol. 6, no. 1, p. 31, 2023, doi: 10.1186/s42400-023-00168-7.

[16] N. T. Muay, E. Sediyono, and J. Tambotoh, “Integration Waterfall and Scrum Methodology in the Development of SIMARGA Web Application,” J. RESTI (Rekayasa Sist. dan Teknol. Informasi), vol. 8, no. 2, pp. 223–233, 2024, doi: 10.29207/resti.v8i2.5652.

[17] I. M. Insan, J. H. Husen, and R. Yasirandi, “UML Modeling of Digital Envelope-Based Security System to Fulfill Security Services,” Indones. J. Comput. Sci., vol. 14, no. 5, 2025, doi: 10.33022/ijcs.v14i5.4986.

[18] F. T. Laksana, S. Palestina, and E. N. Anfa, “Implementasi Perancangan Infrastruktur Kunci Publik pada Pembuatan Surat Organisasi Digital Menggunakan Digital Signature,” J. Tiple A Pendidik. Teknol. Inf. dan Teknol. Inf., vol. 1, no. 2, pp. 91–96, 2022.

[19] R. A. K. N. Bintang, N. T. Romadloni, and F. Ramadhani, “Perbandingan Kinerja Algoritma Klasifikasi Pada Review Pengguna Aplikasi Netflix,” JITET (Jurnal Inform. dan Tek. Elektro Ter., vol. 13, no. 2, 2025, doi: 10.23960/jitet.v13i2.6303.

[20] W. Kurniawan, N. T. Romadloni, and R. A. K. N. Bintang, “Analisis Dampak Cache Progressive Web Apps Terhadap Konsumsi Baterai Android,” JITET (Jurnal Inform. dan Tek. Elektro Ter., vol. 13, no. 2, 2025, doi: 10.23960/jitet.v13i2.6221.