Nominee: Aditya Koranga

Statement

Aditya Koranga is a leading expert in Post-Quantum Cryptography (PQC), Telco Security, and cloud-native technologies, currently serving as the Vice Chair of Post Quantum Cryptography Alliance(PQCA)'s TAC & Chief Security Architect at CORAN LABS, playing a pivotal role in designing and implementing various cryptographic suites and frameworks.

Aditya's expertise spans a range of open-source projects, including OpenSSL, liboqs, cuPQC, Bouncy Castle, StrongSwan, etc. Along with that he has also led open-source communities such as ngKore and Magma India.

Aditya also focuses on the optimization of cryptographic algorithms for example in KEM algorithms: modifying distribution methods, noise sampling, and NTT reduction schemes. He has worked on cryptographic benchmarking, hardware/software crypto acceleration, and authored several technical blogs, white papers, technical reports, deployment videos on several cryptographic tools including OpenSSL and has patents in Post Quantum security.

Beyond his technical expertise, Aditya is a writer, a poet, and a rapper(sometimes, on the weekends) who enjoys reading RFCs before going to bed.

“As a TAC member, I will drive its adaptability, ensuring cryptographic solutions are effectively used and integrated into real-world applications. My focus will be on expanding contributions, fostering collaborations, and bringing more impactful individuals under OpenSSL. Beyond development, I believe in the right alignment between innovation and marketing and will work to unify the community, and ensure transparency so we can move forward together. I will also support the community in executing the OpenSSL Foundation and the OpenSSL Corporation vision, helping wherever needed to strengthen our collective mission."

Nominee: James Bourne

Statement

I'm passionate about privacy, which grants individuals the autonomy to control their personal information. Encryption is the crucial technology that underpins digital privacy. OpenSSL is the leading open-source encryption library. Such projects must continue to exist and thrive to facilitate digital privacy. Further, the fact that the library is open source means:

• It's cost-effective and accessible to anyone

• It can be customised to meet specific needs

• Imbues transparency and trust

• It is available for community review and improvement

• Avoids vendor lock-in

My company has utilised and promoted OpenSSL in our free and commercial products for at least a decade. For reference:
We offer free binary distributions, build scripts, compilation guides, and integration guides for Microsoft Windows: https://www.firedaemon.com/get-openssl

Current commercial Products utilising OpenSSL:
https://www.firedaemon.com/firedaemon-fusion
https://www.firedaemon.com/certify-one

Current free Products utilising OpenSSL:
https://www.firedaemon.com/download-firedaemon-lozenge

Thank you for your consideration!

Nominee: Jacob Maynard

Statement

I have over 2 decades of experience working within the CyberSecurity domain. I spent over a decade working on the Citrix Netscaler, AppFW, and SSL VPN line of networking solutions where we had level 2 FIPS validated networking appliances available within the product portfolio.

My next move led me to the Mobile Device Management group within Citrix where I focused on Unified Endpoint Management for both cloud service and mobile client side components. I architected and deployed the company's on-premise to cloud migration service for XenMobile which involved a decrypt then re-encrypt step while migrating the customer data. I was also on the team that built the multi-tenant version of the server allowing for increased customer density across instances. Following this I moved to the client side of the project where I was responsible for a new design and implementation for their  SSL VPN android client.

Eventually I joined the Citrix Cryptographic Center of Excellence as a developer on the Citrix Crypto SDK which was/is a FIPS 140 validated software module. As a Staff Security Engineer on this team I found myself working with all product groups performing threat models and assisting in cryptographic integrations along side the work of keeping the module enhanced and validated over time. 

Finally, I was exposed to an opportunity to join SafeLogic as the head of their engineering department building out a cross-functional team of engineers who build FIPS 140 products including cryptographic modules and entropy sources for a variety of platforms and language targets. 

In summary I hope my experience would be beneficial to the Technical Advisory Committee I look forward for any opportunity to share my experience with or learn from the community as a whole.