#security-engineering
A set of research notes and deep dives focused on correctness, security, and operational evidence.
Best starting points
PQC Research Series — Part 3
QROM is not “ROM but stronger.” It changes the oracle interface (superposition queries), breaks classical proof tactics (rewinding/programming), and turns Fiat–Shamir security into a tighter, system-bound claim.
PQC Research Series — Part 4
Reduction tightness is where PQC security meets operations: loose reductions consume margin, force parameter inflation, and turn “provably secure” into a bandwidth/RAM/latency problem.
PQC Research Series — Part 2
LWE/SIS are not “magic hardness.” They are interface contracts with worst-case/average-case reductions, structural trade-offs (Ring/Module), and concrete security heuristics (BKZ/sieving) that real systems routinely violate.
Roadmap
- Start with assumptions and invariants
- Enumerate failure modes and attack surfaces
- Define what to monitor and how to roll back