Notes on security, code, and other things I find interesting.

Here you can find some of the things I find interesting and some of the things I've been working on.

Filter by tag

All ai api-design automation aws career cryptography drools engineering security

Showing 7 posts tagged security

September 25, 202614 min read

How ML-KEM Works: From Noisy Equations to a Shared Secret

A walkthrough of FIPS 203: Module-LWE, the K-PKE building block, the Fujisaki-Okamoto transform, NTT multiplication, and why ML-KEM-768 is the default.

security post-quantum-cryptography cryptography ml-kem lattices

September 24, 20267 min read

Post-Quantum Crypto for Sysadmins: What You Actually Update

PQC is not a new TLS version. It is new key-exchange and signature algorithms inside your TLS stacks. Here is the mental model, what to inventory, and how to verify OpenSSL, Nginx, Java, and friends.

security post-quantum-cryptography cryptography tls openssl systems

January 18, 202610 min read

Threat Modeling a RAG Pipeline: STRIDE Meets OWASP LLM Top 10

A practical walkthrough of threat modeling a retrieval-augmented generation pipeline — mapping STRIDE threats to OWASP LLM Top 10 risks with controls that actually ship.

security threat-modeling rag llm ai owasp

October 11, 202510 min read

Post-Quantum Cryptography, Eight Years Later: Revisiting My Master's Thesis

In 2018 I wrote a master's thesis on the state of post-quantum cryptography and built simulators for McEliece and Niederreiter. Here's what the field looks like now - and what actually changed.

security post-quantum-cryptography cryptography research

April 12, 20256 min read

People Prefer Organizing Problems Instead of Solving Them

I've had chances to fix real security issues - and been blocked by people who'd rather stay visible than stay safe. Quick wins beat beautiful frameworks.

productivity security thoughts