Andrey Sidorenko Email & Phone Number

The Hague, Zh, Nl

Delft, Zuid-Holland, Nederland

Involved in software security assessment of SoC/IC security architectures and security scope specifications.Planning, tracking and executing development process, specification as well as software implementation reviews. Reporting the result of the reviews to the management.Monitoring the state of the art in attacks on cryptographic algorithms and protocols.

Leading role in a wide variety of consultancy projects and security evaluations focusing on cryptographic libraries, payment cards, e-Passports, secure signature creation devices, Java Card platforms and mobile apps. Deep knowledge and understanding of security standards.Co-chair of the crypto forum, co-owner of the crypto domain, helping colleagues to understand the implementation of cryptographic algorithms and protocols as well as corresponding attacks and countermeasures.Actively involved in discussions with customers and certification bodies about various aspects of security evaluations such as the scope, strategy, etc.Working on project planning together with project managers. Supporting the sales team with setting up the work breakdown structure for new projects.Training junior security evaluators.

Was involved in security evaluations of smart cards, payment terminals, hardware security modules and other products in accordance with international standards such as Common Criteria, EMVCo, PCI POS.Performed design review, code review, vulnerability analysis, executed penetration tests.Monitored the state of the art in attacks on cryptographic algorithms, attended scientific conferences, shared knowledge with colleagues.Participated in several research projects targeted at the analysis of attack techniques and countermeasures.

Worked on design and analysis of cryptographically secure pseudorandom number generators.Analyzed security and efficiency of existing pseudorandom number generators, such as the Blum-Blum-Shub generator, the Dual Elliptic Curve generator (Dual_EC_DRBG) published in NIST SP800-90. Discovered some weaknesses in Dual_EC_DRBG, suggested how those weaknesses can be fixed. Proposed a new pseudorandom number generator, which is provably secure under the Decisional Diffie-Hellman assumption.Received a doctoral degree in October 2007.

Implemented various error-correcting codes. Took part in a research project.