Encrypted fitness-data pipeline on TACo threshold access control with condition-based decryption, giving users cryptographic control over how their own training data is delegated to third parties. Built under embedded power and network constraints on ESP32 hardware with over-the-air firmware updates.
Built for Hobbs, seeded by a $30,000 first-place Zahn Innovation Center grant in 2022. hobbsapp.netlify.app
","title":"Threshold Access Control for Consumer Health Data","src":null,"video":"https://www.youtube.com/embed/sQR8F7P_f90","tags":["Threshold Cryptography","Proxy Re-encryption","Embedded"],"order":1}},{"node":{"url":null,"description":"You cannot tell which model is actually running behind an AI agent, and a provider has a commercial reason to swap in something smaller or quantized.
SPOT is a session-level protocol. The provider commits to their exact weights once and publishes the hash. Every response afterwards carries a signed receipt bound to that commitment, and a sampled subset carries a zero-knowledge proof that those weights produced that exact output, without revealing them.
","title":"SPOT: Sampled Proofs Over Turns","src":"/projects/spot.jpg","video":null,"tags":["Verifiable Inference","Zero-Knowledge Proofs","Protocol Design"],"order":2}},{"node":{"url":null,"description":"A proof pipeline over multi-hour GPU workloads on NASA-ISRO NISAR radar data: a RISC Zero zkVM guest re-executing a Fiat-Shamir residual check, wrapped in Groth16, with Intel TDX attestation over the off-chain engine.
Then I audited it, and the audit is the useful part. The Fiat-Shamir seed committed only to public inputs, so the sampled column set is computable before choosing what to publish. I built a working forgery: the certificate verifies, every check passes, and 999,744 of 1,000,000 output columns are wrong.
","title":"Chaotic Era","src":"/projects/chaotic_era.jpg","video":null,"tags":["Zero-Knowledge Proofs","RISC Zero","Fiat-Shamir","Protocol Audit"],"order":3}},{"node":{"url":"https://github.com/sha256rma/zk_rollup","description":"Implemented ZK-rollup circuits in Circom, generated proofs with SnarkJS, and verified them with zkutil, to study how validity proofs compress transaction batches for on-chain verification.
Worked the toolchain end to end: compiled circuits, witnesses, proving parameters, and generated Solidity verifiers. The tutorial scaffolding is credited upstream in the repository.
","title":"ZK-Rollups for Scalable Blockchain Transactions","src":"/projects/zkp.jpg","video":null,"tags":["Zero-Knowledge Proofs","Circom","Groth16"],"order":4}},{"node":{"url":"https://github.com/sha256rma/voting_machine","description":"A voting machine in Rust with deliberately embedded backdoors, built to demonstrate election manipulation attack surfaces. I then performed red team analysis of another team's machine.
Nine modules cover the election lifecycle, from admin authentication and voter registration through ballot creation, casting, and tallying, against an append-only audit trail.
","title":"Root the (Ballot) Box","src":"/projects/voting_machine.jpg","video":null,"tags":["Rust","Security Research","Red Team"],"order":5}},{"node":{"url":null,"description":"A self-hostable, IPFS-backed stack giving Zora-based NFTs guaranteed data availability, with a hardware wallet component. IPFS nodes ran garbage collection that made NFT media intermittently unavailable, so the token resolved and the artwork did not.
Built at ETHGlobal NFTHACK 2021. Source · Showcase · Demo
","title":"OwNFT","src":"/projects/ownft.jpg","video":null,"tags":["IPFS","Data Availability","Ethereum"],"order":6}},{"node":{"url":null,"description":"I teach a weekly developer-club series as a Bitshala Educator Fellow, working from one-way functions and proof-of-work through secp256k1, Schnorr signatures (BIP-340), and threshold signing with MuSig2 and FROST.
","title":"Cryptographic Foundations of Bitcoin Club","src":null,"video":null,"tags":["Teaching","Bitcoin","Threshold Signatures"],"order":7}}]}},"pageContext":{}},"staticQueryHashes":[]}