About

Portrait of Khandaker Md. Al-Amin

I work on cryptography, the constructions themselves, their implementations, and what they cost once they are running in something real.

In 2015 I was awarded the Japan Government (MEXT) scholarship to read for a Ph.D. in cryptography at Okayama University under Professor Yasuyuki Nogami. My doctoral research covered optimisation and efficient implementation techniques for elliptic curve pairing-based cryptography and its application to IoT security, and produced the ELiPS library.

I then spent three years at EAGLYS in Tokyo as a research engineer, building fully homomorphic encryption and secure multi-party computation into production systems for privacy-preserving machine learning and encrypted databases. That work was lattice cryptography in practice. BFV, BGV and CKKS are Ring-LWE schemes, and the same Module-LWE hardness now underpins ML-KEM and ML-DSA. I am currently a cybersecurity engineer at ITK Engineering in Berlin, working on cryptographic integration and automotive security standards, and taking the lattice work toward post-quantum cryptography.

Experience

  • Cybersecurity Engineer

    ITK Engineering GmbH · Jan 2024, present · Berlin, Germany

    • Performed in-depth Threat Analysis & Risk Assessment, integrating cryptographic measures to comply with industry security standards (e.g. ISO/SAE 21434).
    • Developed and integrated cryptographic libraries (Mbed-TLS) across large-scale systems for secure data processing in diverse environments.
    • Prepared secure coding guidelines (aligned with SEI CERT) and performed code reviews to ensure robust security for embedded systems.

  • Research Engineer

    EAGLYS Inc. · Nov 2020, Dec 2023 · Tokyo, Japan

    • Requirement analysis, design and development of the secure computing product DataArmor Gate DB.
    • Converted business requirements and theoretical algorithms into working proofs of concept.
    • Performance and security improvement of existing fully homomorphic encryption and MPC products.
    • Python, Rust, C++, gRPC, Docker, SQL, PostgreSQL, MySQL, AWS, Azure, TensorFlow.

Education

  • Ph.D. in Public Key Cryptography

    Okayama University, Japan · 2019

    Supervised by Prof. Yasuyuki Nogami. Japan Government (MEXT) scholar, awarded 2015. Thesis on efficient pairing computation over KSS curves.

  • B.Sc. in Computer Science and Engineering

    Jahangirnagar University, Bangladesh · 2012

Areas of work

Cryptography & secure computing

Work I have actually done. Doctoral research, and three years building these into shipping systems.

  • Pairing-based cryptography and elliptic curves (KSS, BN, BLS families)
  • Lattice-based homomorphic encryption: BFV, BGV and CKKS on Ring-LWE, noise budgets and parameter selection
  • Secure multi-party computation and private set intersection
  • Privacy-preserving machine learning
  • Encrypted-database and secure-computing product engineering
  • Implementation in Rust and C, with an eye on constant-time behaviour

Security engineering & compliance

My current day-to-day at ITK Engineering.

  • EU Cyber Resilience Act readiness and conformity assessment routes
  • SBOM management: SPDX, CycloneDX, provenance and signing in CI/CD
  • Coordinated vulnerability disclosure (ISO/IEC 29147, 30111) and PSIRT operating models
  • Incident response readiness aligned with NIST SP 800-61
  • Automotive cybersecurity: ISO/SAE 21434 TARA, UN R155, secure boot, HSM integration

Where I am taking this next

Self-directed rather than paid work, kept separate for that reason.

  • Post-quantum standards in practice: ML-KEM and ML-DSA, and what migration costs at the protocol layer
  • Hybrid key exchange and the transition problem for long-lived systems
  • Zero-knowledge proof systems and the pairing-based components I already know well

Contact