I work on post-quantum cryptography: finding where a codebase uses RSA, ECC and DH, the algorithms a quantum computer will break, and measuring how well the tools that look for it actually do. I publish what a measurement does not show, not only what it does.
Projects
- ShorList: an open, versioned catalogue of the ways cryptography appears in code and configuration, with decoys and a primary source on every row. Any crypto scanner can be scored against it.
- qrp-mcp: a free, local cryptographic inventory (CBOM) for developers and AI agents. It states its own coverage and limits.
- cce-exposure-curves: From Q-Day to Exposure Curves, a framework for planning post-quantum migration. Paper and code.
- Baton: persistent task memory for Claude Code, enforced by hooks (MIT).
- Fleetpost: coordination for AI coding agents across machines, over any rclone remote.
Work: Elkan Electronic, Bulgaria · quantumreadiness.eu


