Building the same secure channel twice
Why I implemented one encrypted channel with two different post-quantum families, and what attacking my own protocol taught me.
~/ Breaking things to build them better.
Cybersecurity engineer · NYU Tandon MS ’26 · Brooklyn, NY
Research Coordinator at NYU’s OSIRIS Lab. I build and break low-level systems: a post-quantum secure channel in C, a race-condition fuzzer for the Linux network stack, a hardened xv6 kernel, and a CSAW CTF 2025 challenge.
Open to security roles
Now
Research Coordinator, OSIRIS Lab leading RaceFuzz Lind project researcher CSAW CTF 2025 challenge author
~/work
A research-grade post-quantum secure channel in C, implemented twice behind one pluggable backend: ML-KEM-768 (Kyber) with ML-DSA-65 (Dilithium), and lattice-free HQC-192 with SLH-DSA (SPHINCS+).
Both backends sealed with AES-256-GCM and HKDF-SHA256, then attacked and benchmarked in a unified Docker test harness at NIST PQ Category 3.
A semantic fuzzing framework that targets race conditions in the Linux kernel’s network stack, combining coverage-guided mutation, custom Go-based corpus generation and concurrency analysis.
The OSIRIS Lab research project I lead, one of the nine projects I coordinate.
Implemented PGD adversarial training on MNIST to validate Madry et al. (2018), re-engineering the TensorFlow 1.x code for 2.x so CleverHans and ART experiments could run.
About 90% accuracy against PGD and FGSM attacks, with weaknesses identified under C&W attacks and distribution shift.
~/research
Since February 2026 I’ve been Research Coordinator at OSIRIS Lab, NYU’s cybersecurity research group, guiding nine active projects across kernel exploitation, AI security, embedded systems and CTF infrastructure. Each project mentors students across skill levels.
Developing a semantic-aware fuzzer to detect race conditions in the Linux kernel’s network stack using coverage-guided mutation and concurrency analysis.
Building an MCP (Model Context Protocol) server that assists in binary exploitation workflows, automating gadget finding, ROP chain construction, and exploit generation.
Augmenting large language models with chain-of-thought reasoning to autonomously solve CTF challenges across crypto, pwn, and web categories.
Designing a physically unclonable function (PUF) based authentication protocol for resource-constrained embedded devices resistant to side-channel and replay attacks.
Developing a secure Automatic Dependent Surveillance–Broadcast (ADS-B) framework to authenticate aircraft transponder signals and defend against spoofing and injection attacks.
Analyzing security vulnerabilities in ROS 2 robotic middleware and real-time operating systems (RTOS), with focus on privilege escalation and message injection attacks.
Investigating how AI models embedded in IoT devices can be exploited for privacy leakage through model inversion, membership inference, and side-channel analysis.
Large-scale scraping and analysis of Pastebin and similar platforms to identify leaked credentials, API keys, PII, and sensitive organisational data for responsible disclosure.
Designing adaptive CTF challenges that evolve in difficulty and category based on an AI solver’s capabilities — creating a co-evolutionary arms race between AI and human-designed puzzles.
~/writing
Why I implemented one encrypted channel with two different post-quantum families, and what attacking my own protocol taught me.
Why race conditions are the bugs fuzzers are worst at finding, and what semantic fuzzing means. Notes from RaceFuzz.
Solving CTF challenges makes you a better attacker. Writing one makes you a better engineer.
~/about
I’m a cybersecurity engineer pursuing my MS at NYU Tandon School of Engineering (GPA 3.9/4.0), expected May 2026. I graduated from NIT Calicut with a B.Tech in EEE, where circuits and systems sparked a deep passion for digital security.
As Research Coordinator at OSIRIS Lab I manage nine active research projects spanning kernel fuzzing, adversarial ML, CTF tooling and IoT security. I’m also a CTF Team Member and help run competitions like CSAW; I authored one of the CSAW CTF 2025 challenges. I like going deep, from building a post-quantum secure channel in C to modifying the xv6 kernel with ASLR and W^X protections.
Off the keyboard I run an interview series and keep a page of hobbies.
~/experience
2026 – now
New York University · Feb 2026 – present · New York City (hybrid)
Managing 9 active security research projects across kernel fuzzing, adversarial ML, IoT security, and CTF tooling. Also a CTF Team Member since Jan 2025 — competed globally, co-ran CSAW CTF 2025 and organised Hack@NYU at Microsoft NYC.
2025 – now
New York University · Jan 2025 – present · New York City
OS-level security research using Rust, contributing to the Lind sandbox project — a restricted POSIX environment to safely execute untrusted code via WebAssembly.
2023 – 2025
Full-time · Remote · Oct 2023 – Sep 2025
Executed red-team adversarial simulations across enterprise environments improving defense efficiency by 30%. Architected zero-trust network security frameworks with microsegmentation and least-privilege access controls.
2022
Coimbatore, India · Jun – Jul 2022
Penetration testing and vulnerability assessment on embedded E-Drive automotive systems. Security analysis of CAN bus communications and firmware hardening.
2021
Bangalore, India · Jan – Jun 2021
Developed and evaluated computer vision models for automotive safety. Researched adversarial robustness of real-time detection pipelines in safety-critical environments.
2019 – 2023
National Institute of Technology, Calicut · CGPA 8.2/10
Published research on adaptive distance relay coordination (15% reliability improvement). ISTE Joint Secretary, IEEE IAS/CAS member, Placement Cell Representative, Powerlifting Team.
~/contact
Whether you have a security challenge, research collaboration, CTF opportunity, or just want to talk, I’m always open to interesting conversations. The fastest way to reach me is email; I usually reply within 24 hours.