<?xml version="1.0" encoding="UTF-8"?>
<article article-type="Research Article">
  <front>
    <journal-meta>
      <journal-id journal-id-type="publisher">journal-of-discrete-mathematical-sciences-and-cryptography</journal-id>
      <journal-title-group>
        <journal-title>Journal of Discrete Mathematical Sciences and Cryptography</journal-title>
      </journal-title-group>
      <issn publication-format="electronic">2169-0065</issn>
      <issn publication-format="print">0972-0529</issn>
      <publisher>
        <publisher-name>Taru Publications</publisher-name>
      </publisher>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="doi">10.47974/JDMSC-2310</article-id>
      <title-group>
        <article-title>Modification of SHA-256 hashing algorithm in protecting website service user passwords</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <given-names>Sarwindah</given-names>
          </name>
          <aff>Department of Digital Business, Institut Sains dan Bisnis Atma Luhur, Pangkalpinang, Indonesia</aff>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Japriadi</surname>
            <given-names>Yohanes Setiawan</given-names>
          </name>
          <aff>Department of Informatics Engineering, Institut Sains Dan Bisnis Atma Luhur, Pangkalpinang, Indonesia</aff>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <given-names>Sujono</given-names>
          </name>
          <aff>Department of Information Systems, Institut Sains dan Bisnis Atma Luhur, Pangkalpinang, Indonesia</aff>
        </contrib>
        <contrib contrib-type="author" corresp="yes">
          <name>
            <given-names>Maxrizal</given-names>
          </name>
          <aff>Department of Information Systems, Institut Sains dan Bisnis Atma Luhur, Pangkalpinang, Indonesia</aff>
        </contrib>
      </contrib-group>
      <volume>28</volume>
      <issue>6</issue>
      <fpage>2397</fpage>
      <lpage>2407</lpage>
      <pub-date date-type="pub">
        <day>14</day>
        <month>08</month>
        <year>2025</year>
      </pub-date>
      <abstract>
        <p>The SHA-256 algorithm is still quite popular in password encryption for website user account logins and digital signature encryption. The security of SHA-256 lies in using a one-way hash function that cannot return the message to its original form. However, there are currently many tools on the internet that provide SHA-256 message decryption services so that the original message is obtained. This is what causes the security level of SHA-256 to be less good. For this reason, experts have introduced several improvements to SHA-256. One researcher has modified SHA-256 by adding the Hill Cipher algorithm. This aims to produce a different message digest so that it is not easily described by the decryption provider tool. However, hacking by tools on the internet is still possible using the Hill Cipher algorithm. Using the inverse (reverse) of the key matrix in the Hill Cipher allows the ciphertext to be converted back into plaintext, so there is always a chance of hacking by finding the inverse of the key matrix. For this reason, this study proposes improvements to SHA-256 by adding Hill Cipher modifications. Researchers still use SHA-256 to produce a message digest in the early stages. Furthermore, the resulting message digest will be forwarded with a modification of the Hill Cipher with a singular matrix key (it does not have an inverse). The use of a singular key matrix will invalidate the opportunity for hacking through an inverse matrix attack. In the final stage, researchers will test the execution speed of the proposed system.</p>
      </abstract>
      <kwd-group>
        <kwd>SHA modification</kwd>
        <kwd>SHA-256</kwd>
        <kwd>Hill cipher 256</kwd>
        <kwd>Hashing modification</kwd>
        <kwd>Cipher  modification</kwd>
      </kwd-group>
      <custom-meta-group>
        <custom-meta>
          <meta-name>access</meta-name>
          <meta-value>open</meta-value>
        </custom-meta>
        <custom-meta>
          <meta-name>retracted</meta-name>
          <meta-value>no</meta-value>
        </custom-meta>
      </custom-meta-group>
    </article-meta>
  </front>
</article>
