Skip to content
View jregele's full-sized avatar

Highlights

  • Pro

Block or report jregele

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please donโ€™t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this userโ€™s behavior. Learn more about reporting abuse.

Report abuse
jregele/README.md

What we do is secret

-- Darby Crash

I spend my days thinking about security gaps in high dimensional spaces. Applies well to both adversarial AI and lattice-based cryptography....

In a previous life I was co-founder and Managing Director of Arxum Path Security GmbH. I hold OSCP and OSWE certs from Offensive Security, and my experience ranges from embedded C development of hardening OpenCAN automotive networks with CANCrypt to gradient-based attack techniques against Neural Network classifier models. I am a subject matter expert in crypto wallet security, and have spoken at Secureum's TrustX in Istanbul on the matter.

Research

Current research focuses on attacking probability spaces in Transformer architectures, Fully Homomorphic Encryption optimizations using the CKKS scheme for private ML inference, and a multi-party Zero-Knowledge Proof protocol scheme using altered lattice-based public key derivation schemes.

Published Audits

Most of my professional work is private, but here are some published audits I've been a part of.

Client Project Name Date Report Type Language
5North 5N Loop Wallet May 2026 ๐Ÿ“„ Wallet Go Typescript
Velar Labs Clarity Smart Contracts May 2024 ๐Ÿ“„ Smart Contracts Clarity
POKT Network Sparse Merkle Trie (SMT) June 2024 ๐Ÿ“„ Sparse Merkle Trie Cryptographic Implementation Go
MetaMask Snaps Extension Integration September 2023 ๐Ÿ“„ Browser Extension TypeScript
MetaMask Snaps September 2023 ๐Ÿ“„ Browser Extension TypeScript
MetaMask Extension โ€“ Seed Phrase Implementation July 2022 ๐Ÿ“„ Browser Extension TypeScript
Leather formerly Hiro Stacks Wallet Extension April 2021 ๐Ÿ“„ Browser Extension TypeScript
Tezos Foundation Kukai Wallet March 2022 ๐Ÿ“„ Wallet TypeScript
Loopring Loopring 3.6 Design + Implementation: Circuit March 2021 ๐Ÿ“„ ZK Cryptography C++

Conference Talks

ShmooCon 2018 Better Git Hacking: extracting โ€œDeletedโ€ Secrets from Git Repositories with Grawler

Secureum TrustX 2023 My Tools Donโ€™t Work Here: Penetration Testing Browser Based Crypto Wallets

Blog Posts

My Tools Don't Work Here: Penetration Testing Browser Based Crypto Wallets

Forging CSRF Tokens in Hardened Rails Environments before 6.0.3.1 and 5.2.4.3 (CVE-2020-8166 Explained)

CBC Mode is Malleable. Donโ€™t trust it for Authentication โ€” Arxum Path Security

Decrypting IndexedDB with Javascript โ€” Arxum Path Security

Popular repositories Loading

  1. grawler grawler Public

    Extract deleted secrets from git repos

    Shell 61 10

  2. Lrrr Lrrr Public

    Forked from linuz/LongRangeReader

    Objective-C 1 1

  3. dc22beatbadge dc22beatbadge Public

    DefCon 22 Beat Badge

    Propeller Spin

  4. jregele jregele Public