Security expert/software developer

This is the list of the most relevant projects:

* Implemented an operating system for a SAM (Secure Access Module)
The OS contains a transactional file system, communication protocols, implementation of cryptographic algorithms and a secure update mechanism, which allows only ciphered and signed software. The SAM’s main functionality is mutual authentication with contactless cards (transport tickets) following Desfire cryptographic protocols. The SAMs are currently used in Madrid’s transportation networks (such as metro) and were part of a large scale project to enable transfer from old paper-based tickets to contactless ticketing.

Tech stack
Programming languages: C, Java
Tools: Keil uVision, Keil compiler, IntelliJ IDEA, SVN, Doxygen, logic analyzers
Hardware: Infineon MCUs, T=0 and T=1 protocols (as defined by ISO7816) on top of UART, emulation on FPGAs
Concepts: low-level debugging, real-time operating systems, assembler, cryptography, secure protocols (Desfire)

* Implemented symmetric cryptography, secure protocols and secure update mechanism for new SAMs and HSMs (Hardware Security Module), used by Barcelona’s Metropolitan Transport Authority and Biscay Transport Consortium
The HSM is an in-house product and the software for it was written from scratch. The SAMs and HSMs form the new security backbone for transport operators (railway, metro, etc.) in Catalonia and Basque Country. Secure protocols include complete implementation of the newest Desfire EV2 and Cipurse protocols. The projects are currently in the stage of deployment.

Tech stack
Programming languages: C++, C, Java, Kotlin, Python
Tools: CLion, Keil uVision, Keil compiler, CMake, IntelliJ IDEA, gradle, SVN, git, logic analyzers
Hardware: Infineon and FTDI MCUs, SPI, I2C, USB, T=0 and T=1 protocols (as defined by ISO7816) on top of UART, emulation on FPGAs
Concepts: low-level debugging, real-time operating systems (FreeRTOS), assembler, cryptography, secure protocols (Desfire EV2, Cipurse), multithreading

* Implemented protocols, drivers and data persistence for Vadecity’s Vadebike project (smart and secure parking for bicycles)
The implementation allowed successful data exchange between different components that composed a whole system, which included several microcontrollers, a contactless card reader, an embedded computer and other chips (such as flash memories). Secure update mechanisms for software and business data were developed as well. As the result, Vadebike earned funding from Horizon 2020 (EU’s program for research and innovation) and an improved version is currently deployed in Barcelona.

Tech stack
Programming languages: C
Tools: MCUXpresso SDK and IDE, GNU compiler, SVN, logic analyzers, JTAG
Hardware: NXP MCUs, SPI, CAN bus
Concepts: low-level debugging, real-time operating systems (FreeRTOS), cryptography, secure protocols, multithreading, contactless cards and antennas (ISO/IEC 14443)

* Implemented two compression algorithms for HAMMER2 file system
This resulted in increased performance and significant space saving (e. g., ~13% of reading performance in case of real-time compression; ~50% space saving in case of text files).

Tech stack
Programming languages: C
Tools: text editors, GNU compiler, virtual machines, GDB, git
Hardware: PC
Concepts: low-level debugging, operating systems (UNIX-like operating system from BSD family), multithreading, compression algorithms