Nominee: Dr. Yi Ouyang

Statement

I am Dr. Yi Ouyang, currently serving as the Director of Software Development at Oracle, where I lead the Oracle Crypto Foundation team. My team is responsible for managing network security, data encryption, and authentication technologies.

I earned my Ph.D. in Computer Science from Dartmouth College, New Hampshire, USA in 2008. My academic research focused on encryption key management, data protection, and privacy in sensor networks, with several publications in prestigious international conferences. Since joining Oracle, I have played a key role in the development of various security products and features.

OpenSSL 3.x has seen increased adoption across enterprises and large organizations due to its robust implementation, pluggable architecture, superior performance, and support for FIPS. As enterprise solutions often face diverse customer requirements and that too under the most demanding operational conditions, they serve as ideal proxies for real-world use cases, extending the reach of OpenSSL into various mission-critical applications worldwide.

Oracle databases are used by hundreds of thousands of enterprises globally, powering some of the most sensitive and high-demand workloads. In alignment with industry standards and enterprise needs, Oracle has adopted OpenSSL 3.x as the cryptographic library for its database and related products. As the leader of the integration effort for OpenSSL within Oracle's database systems, I am uniquely positioned to bring real-world deployment insights and usage requirements to the OpenSSL community.

In today’s rapidly advancing GenAI landscape, the need for a cryptographic framework that is 100% reliable, secure, and resilient under all conditions is paramount. As a member of the OpenSSL Foundation Business Advisory Committee (BAC), I would contribute my expertise to help guide and prioritize the most critical enterprise requirements. This includes shaping the future direction of OpenSSL to meet the demands for functionality, security, performance, reliability, and extensibility. Together, we can ensure OpenSSL remains as #1 cryptographic tool worldwide.

Given my deep involvement in enterprise-level security and OpenSSL integration, I am honored to nominate myself for a position on the OpenSSL Foundation Business Advisory Committee. I am committed to leveraging my knowledge and experience to help OpenSSL meet the evolving needs of the global enterprise community.

Nominee: Kevin Micciche

Statement

I have over 16 years of experience in the federal certifications field, managing compliance with frameworks such as Common Criteria, FIPS, and DoDIN within the United States, as well as various international certification schemes. My career includes work with multiple certification laboratories, conducting evaluations across a wide range of vendors and product types. Additionally, I have lead my organization's secure SDLC initiatives, ensuring compliance with government mandates and maintaining a strong security posture. These efforts demonstrate our commitment to delivering products that meet rigorous security and compliance requirements, providing assurance to our customers.

In my current role as Chief Technologist for Platform Trust, I serve as a lead subject matter expert on cryptography to provide platform security and trust (TPM usage, code signing, inter-platform communication). Furthermore, I lead the business units' transition to post-quantum cryptography in coordination with company-wide efforts, oversee our various PKI implementations, and participate and/or lead the relevant standards bodies and industry associations.

This experience aligns with the Foundation BAC's focus on driving business strategy against market requirements based upon industry and organizational needs.