Applied cryptography and systems engineering research across FreeBSD, Rust, and COBOL ecosystems — compilation context security, cryptographic integrity, and crypto agility for critical infrastructure. Every claim backed by a reproducible artifact — hexdump -C, not visual render.
| Repository | Description |
|---|---|
| cobol-shield | Static analysis toolkit for COBOL legacy systems — invisible Unicode detection, format boundary analysis, source transformation integrity |
| vtr-forensic-img | Hybrid Rust+Python forensic image analysis — binary parsing, chain of custody, adversarial test suite |
| cryptofault | Passive PCAP and certificate analysis for OT/ICS — TLS version detection, weak keys, plaintext sessions |
| cfg-shield | Feature flag semantic drift detector for Rust — confirmed against generic-ecies |
| vtr-sentinel-kmod | FreeBSD 14 kernel module for OT/ICS security telemetry — Phase 3 confirmed, reproducible build under R-09 |
| vtr-methodology | VTR-DEV-001 and VTR-COMP-001 — artifact production and compilation context methodology, CC BY 4.0 |
- FreeBSD — crp/mbuf/refcount leak fix in
sys/net/if_ovpn.c— rGa841961da752 — merged by kp (Kristof Provost) - FreeBSD —
sa_lenvalidation beforebcopy/memcpyin 5sys/net/interfaces — D59140 — open, under review - RustCrypto/crypto-bigint — documentation clarification for
xgcd_vartimedelegation — PR #1333 - IBM/Bank-of-Z — copy-paste defect in ABND-TIME seconds field across 23 CICS programs — PR #210 merged, closes Issue #205
- Raspberry Pi Linux — resource leak and stack overflow in vc04_services (VTR-RPi-001, VTR-RPi-002) — resolved in PR #7576
- generic-ecies — SharedInfo/1,2 analysis per SEC 1 v2.0 §5.1.3 — Issue #2, PR in preparation
- Tailscale — FreeBSD port version representation divergence — Issue #18136
- Tailscale — Parrot OS Echo misdetected as debian bullseye in install.sh — Issue #20960
- Source Transformation Integrity in Legacy COBOL Systems — DOI 10.5281/zenodo.21974261 — Zenodo 2026, CC BY 4.0
- Compilation Context as a Security Variable: A Cross-Language Classification Framework — DOI 10.5281/zenodo.22063208 — Zenodo 2026, CC BY 4.0
Each project distinguishes observed facts from inference and projection under the CONFIRMED / PROBABLE / OBSERVED framework. Build reproducibility is verified under R-09: source → toolchain → artifact → evidence, with SHA-256 at each boundary.