PROTOTYPE OF A QUANTUM RANDOM NUMBER GENERATOR WEB SERVICE FOR SECURE MESSAGE EXCHANGE

Abstract

This work pays special attention to the HMAC cryptographic mechanism as one of the most effective means of ensuring message authenticity and integrity. The principles of HMAC operation are examined, and its modification HMAC-SHA-256 – recognized as a modern standard in secure data exchange – is described. A comparison of different HMAC implementations revealed a balance between security and performance, which makes it suitable for use in web services with high performance and security requirements, including the QRNG web service. The choice of tools and the development environment for the QRNG web service prototype is substantiated, and its main components are described. Block diagrams of the user authentication logic and private messaging processes are presented. The results of testing the system’s key security functions under various scenarios are provided, including protection against spoofing, false authentication, and the handling of exceptional situations. Effective secure message exchange in the QRNG web service requires a comprehensive approach that includes the implementation of reliable cryptographic methods, secure and reliable session and key management, as well as the use of modern authentication systems. Such an approach not only ensures a high level of security but also maintains the high performance of the web service under heavy loads, which is critically important for its stable operation in the modern digital environment. A comprehensive approach to building secure message exchange within the web service is essential for creating a reliable and secure QRNG platform capable of withstanding modern cyber threats and ensuring data security.