Cryptography

Open-source toolkit (12 repositories): YubiKey PIV and FIDO2 credentials backing HashiCorp Vault SSH certificates and dynamic database credentials, FROST threshold-signed API keys with OPA, Terraform state protection, and credential rotation across AWS, OCI, GCP, and Azure.

Reverse-engineered the Carberp banking trojan's command-and-control and found exploitable flaws and broken cryptography.