Open Secure Communications Networks · Secure & Trustworthy Hardware · CDT-Fort
|
I am a researcher in Open Secure Communications Networks at the University of Surrey, specialising in Secure and Trustworthy Hardware as part of the CDT-Fort programme. My research interests centre on post-quantum cryptography, authentication protocols, formal security verification, biometric security, and secure communications. I am particularly interested in taking cryptographic and security concepts beyond their theoretical models and evaluating how they behave in practical systems. I completed an MSc in Cyber Security at the University of Surrey, following a First-Class Honours BSc in Computer Science. My MSc research focused on the formal verification and practical implementation of a post-quantum multi-server authentication protocol combining biometrics, fuzzy extraction, secure sketches, and ML-KEM. Alongside security research, I have a strong background in full-stack software engineering, developing secure web applications, APIs, infrastructure, and cloud-based systems.
|
Post-Quantum Security
Formal Verification
Biometric & Hardware Security
Secure Software Engineering
Research Areas |
CDT-Fort · University of Surrey
Field: Secure and Trustworthy Hardware
My PhD research focuses on security within open secure communication networks, with particular interest in cryptographic protocols, post-quantum security, trustworthy hardware, and the practical security of modern communication systems.
The work builds upon my background in applied cryptography, formal protocol verification, authentication systems, and secure software engineering.
My MSc Cyber Security dissertation investigated different approaches to Multi-Server Authentication (MSA), including both classical cryptographic schemes and post-quantum implementations incorporating biometric authentication.
The primary protocol studied was a post-quantum multi-factor authentication protocol for multi-server architectures. I formally modelled and analysed the scheme using ProVerif, where testing identified a denial-of-service vulnerability within the protocol.
A mitigation was subsequently designed using Message Authentication Codes (MACs) to provide integrity verification before computationally expensive authentication operations were performed.
The protocol was also implemented as a practical proof of concept to investigate its feasibility outside of formal verification.
Implementation included:
- ML-KEM post-quantum key establishment
- Multi-server authentication
- Biometric authentication
- Fuzzy extractors
- BCH-based secure sketches
- Physical fingerprint scanner integration
- Emulated smart cards
- Python and FastAPI
- Formal verification with ProVerif
- DoS attack modelling and mitigation
- Message Authentication Code based protocol protection
This allowed the protocol to be evaluated both as a formal security model and as a real-world authentication system.
|
A formally verified and practically implemented authentication system combining post-quantum cryptography, biometrics, and multi-server authentication. Key areas:
|
My BSc dissertation explored fine-grained authorisation for low-resource systems through a standalone microservice with dynamic cryptographic selection. Key areas:
|
|
A workforce mental-health platform developed as part of the University of Surrey Green Tech Jam. The project received 2nd Place and a £1,000 award for its technical implementation and social impact. Key areas:
|
Development and deployment of modern web applications combining application security with automated infrastructure. Key areas:
|
|
Post-Quantum Cryptography
ML-KEM, quantum-resistant authentication, key establishment |
Formal Verification
ProVerif, Scyther, protocol modelling, attack discovery |
Authentication
Multi-server authentication, biometrics, fuzzy extractors, secure sketches |
Secure Communications
Trustworthy hardware, protocols, network security, access control |
Supporting undergraduate and postgraduate teaching across Computer Science and Cyber Security, providing practical guidance on technical concepts, implementation, debugging, and problem solving.
Previous teaching support has included areas such as:
- Privacy Enhancing Technologies
- Web Development
- Database Systems
- Software Engineering
- Cyber Security
- RSA, AES, DES and CBC-MAC
- Full-stack application debugging
- Database design and data modelling
Security research prototypes
I enjoy taking protocols and cryptographic constructions from academic papers, formally analysing their security properties, and implementing them to investigate their practicality in real-world environments.
Cryptography & authentication systems
I am particularly interested in post-quantum cryptography, authentication protocols, biometric security, key establishment, fuzzy extractors, secure sketches, and formal verification.
Secure full-stack systems
I enjoy developing applications where the frontend, backend, database, authentication, authorisation, and deployment infrastructure are designed together with security in mind.
Infrastructure & automation
I work with Docker, GitHub Actions, Linux, Nginx, and cloud infrastructure to build reproducible and maintainable deployment workflows.
Post-Quantum Security · Formal Verification · Secure Communications · Full-Stack Engineering
Thanks for visiting my profile!