Andrey Sidorenko Email & Phone Number

The Hague, ZH, NL

Delft, Zuid-Holland, Nederland

Involved in software security assessment of SoC/IC security architectures and security scope specifications.Planning, tracking and executing development process, specification as well as software implementation reviews. Reporting the result of the reviews to the management.Monitoring the state of the art in attacks on cryptographic algorithms and protocols.

Leading role in a wide variety of consultancy projects and security evaluations focusing on cryptographic libraries, payment cards, e-Passports, secure signature creation devices, Java Card platforms and mobile apps. Deep knowledge and understanding of security standards.Co-chair of the crypto forum, co-owner of the crypto domain, helping colleagues to.

Was involved in security evaluations of smart cards, payment terminals, hardware security modules and other products in accordance with international standards such as Common Criteria, EMVCo, PCI POS.Performed design review, code review, vulnerability analysis, executed penetration tests.Monitored the state of the art in attacks on cryptographic.

Worked on design and analysis of cryptographically secure pseudorandom number generators.Analyzed security and efficiency of existing pseudorandom number generators, such as the Blum-Blum-Shub generator, the Dual Elliptic Curve generator (Dual_EC_DRBG) published in NIST SP800-90. Discovered some weaknesses in Dual_EC_DRBG, suggested how those weaknesses.

Implemented various error-correcting codes. Took part in a research project.