ResearcherCollabAbout
Independent researcher in post-quantum cryptography, working on how organisations can find and measure their exposure to the quantum threat before they migrate. My main project is the PQC-SOC Readiness Scanner, an open-source, MIT-licensed Python tool that audits TLS under two distinct threat models: harvest-now-decrypt-later risk on the key exchange, reconstructed from packet captures, and authentication forgery risk on the certificate layer, read from live X.509 endpoints. Each finding is scored on a 0 to 100 urgency scale using an original four-factor model - algorithm risk, data sensitivity, data lifetime and exposure surface - and mapped to the NIST FIPS 203, 204 and 205 migration targets, with output as JSON and native CEF for direct SIEM ingestion.
I released v0.1 in July 2026 and evaluated it against 69 UK public-facing endpoints across government, healthcare, education, banking, regulation and media - all quantum-vulnerable, none using hybrid PQC - alongside a real-world packet capture from the WRCCDC 2026 dataset. I presented a poster on the work at the Authentication for Quantum Networks workshop at King's College London in June 2026, and the methodology paper is in preparation for arXiv (cs.CR). The approach is built on the mathematical foundations, from CRYSTALS-Kyber and CRYSTALS-Dilithium to lattice-based hardness assumptions, and shaped by a security operations background in SIEM monitoring and incident response, which is why it is designed to run inside a SOC rather than only in a lab.
