Mihir Luthra Email & Phone Number

Bengaluru, Karnataka, India

As a SDE-3, my role took a shift to help pre sales team with technical aspects to help onboard new customers. This almost always required developing new features from ground up to fulfil the use cases.I had to work on things like:- File system encryption on Windows OS with encryption key stored in our key management system. Due to many asks on Windows OS, had to get familiar with Powershell, Win32 APIs and multiple concepts in Windows OS like services.- Upgraded our key caching service to run on Intel SGX and AWS Nitro.- Updating our key caching library, written in Rust, to work on Android- Developed Initial version of an observability platform for tracking cryptographic keys usage across clouds. I mainly focused on AWS.- Other minor integration work like using our key management system with Databricks.

Bengaluru, Karnataka, India

As a SDE-2, I focused on:- Some of the IAM (Identity and access management) implementations. This included things like implementing our 2FA/MFA (Two factor authentication). For this, we followed U2F/FIDO2/WebAuthn standards.- Also contributed to implementation of Custom roles in IAM.- I implemented integration of Docker Notary (used for code signing) with our Key Management System (KMS).- Continued with work on our PKCS#11 implementation.- Implemented PKCS#10 (about Certificate signing request) for our product.- I worked on many features for BYOK (bring your own keys) to cloud platforms like AWS and Azure.- Dealt with many customer issues.In this role also, I was in constant touch with:- Cryptography (symmetric keys, asymmetric keys, certificates, PQC, etc)- Cassandra- Cloud platforms (AWS and Azure).- Intel SGX

Bengaluru, Karnataka, India

As a SDE-1, I focused on multiple tasks, like:- Our in house client generator written in Rust.- Our PKCS#11 library implementation (https://en.wikipedia.org/wiki/PKCS_11)- Diving multiple times into serde crate internals for various use cases.- Writing a stateless key caching service that ran on Intel SGX.Aside of this, I had developed multiple features in our KMS (Key management system). While working on this, I many times came across:- Symmetric keys (AES, DES, ARIA, etc) and Asymmetric keys (RSA, EC, DSA, KCDSA, etc).- Some readings about PQC (Post quantum cryptography), like LMS algo.- X509 certificates- OpenSSL and Mbed TLS.

Bengaluru, Karnataka, India

As an intern, I worked on an in house client generator that could generate clients in various languages for our services.

Remote

Remote

This is something I did as a studentMy main contribution was to an existing feature called "Trace mode" which intercepted various libc functions in multiple processes that dealt with files (like `open(2)`, `stat(2)`, etc). This path was checked against a local server for some factors.But this reaching out to the local server added slowdowns. So, we wanted to have some caching. The task was to implement a cache shared among processes that can be queried from within the intercepted libc function.Also, we couldn't use locks in this cache because we were injecting our code in unknown processes and that could have ended up with a deadlock (like if the process stopped while our lock was still being held). So, the cache had to be lock free.I worked on making a lock-free shared memory allocator that would allocate in a shared file that we got by `mmap(2)`. Upon this, we built a ctrie data structure that would actually do some great path caching.

Bachelor Of Technology - Btech, Computer Science

Education record