Faruk Aliyu Fari

Beyond Random Suffixes: Security Analysis and a Cryptographically Hardened Reference-Number Protocol for Web-Based Academic Credential Verification, with a Case Implementation at Northwest University, Kano

Abstract: Many institution-level credential-verification systems generate a random-looking reference code and treat it as secure by virtue of being unique, without examining whether that code is actually resistant to guessing. This paper re-examines a deployed reference-number sc...