Performance analysis and comparison of algorithms for integrity checking

V zadnjih letih se je na trgu varnosti zgodilo več pomembnih sprememb. Del sprememb so povzročili zgoščevalni algoritmi, ki smo jih v tej nalogi vzeli pod drobnogled. Zaradi teh sprememb nas zanima delovanje algoritmov, in sicer tistih, ki so bili nadomeščeni, se trenutno uporabljajo in ki šele prihajajo v uporabo. Omejili smo se na zgoščevalne algoritme ter sorodne algoritme MAC (angl. Message Authentication Code). V sklopu magistrske naloge smo implementirali in testirali štiri kriptografske knjižnice (OpenSSL, Crypto++, LibTomCrypt in Libgcrypt) ter na pridobljenih podatkih izvedli statistično analizo. Analiza knjižnic nam je pokazala, da je najhitrejša knjižnica OpenSSL, vendar je knjižnica Crypto++ z njo primerljiva ter jo je laže uporabljati in ima boljšo dokumentacijo. Glede na analizo algoritmov bi v primeru zgoščevalnih algoritmov priporočili uporabo algoritma SHA-256, če nam je pomembna predvsem hitrost, če pa želimo najboljše varnostne lastnosti, je najboljša izbira algoritem SHA-3-256.In recent years there have been significant changes in the market of digital security. Part of the changes came from hash algorithms, on which we have focused here. Because of these changes, we are interested in the performance of algorithms, specifically those that have been replaced, are currently in use, and those that are just coming into use. We limited ourselves to hash algorithms and to them related MAC (Message Authentication Code) algorithms. As part of the master’s thesis, we implemented and tested four cryptographic libraries (OpenSSL, Crypto ++, LibTomCrypt and Libgcrypt) and performed statistical analysis on the obtained data. The library analysis has shown us that the fastest library is OpenSSL, while the Crypto++ library is comparable, but with better documentation and is easier to use. Based on the result analysis, and in the case of hash algorithms, we would recommend the use of SHA-256 algorithm, when speed is the most important, while the SHA-3-256 algorithm is a very good option when we are after the best security properties