Skip to content
View LuisCastellanos-dev's full-sized avatar

Block or report LuisCastellanos-dev

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

Luis Fidel Castellanos Diaz

Applied cryptography and systems engineering research across FreeBSD, Rust, and COBOL ecosystems — compilation context security, cryptographic integrity, and crypto agility for critical infrastructure. Every claim backed by a reproducible artifact — hexdump -C, not visual render.


Active Projects

Repository Description
cobol-shield Static analysis toolkit for COBOL legacy systems — invisible Unicode detection, format boundary analysis, source transformation integrity
vtr-forensic-img Hybrid Rust+Python forensic image analysis — binary parsing, chain of custody, adversarial test suite
cryptofault Passive PCAP and certificate analysis for OT/ICS — TLS version detection, weak keys, plaintext sessions
cfg-shield Feature flag semantic drift detector for Rust — confirmed against generic-ecies
vtr-sentinel-kmod FreeBSD 14 kernel module for OT/ICS security telemetry — Phase 3 confirmed, reproducible build under R-09
vtr-methodology VTR-DEV-001 and VTR-COMP-001 — artifact production and compilation context methodology, CC BY 4.0

Upstream Contributions

  • FreeBSD — crp/mbuf/refcount leak fix in sys/net/if_ovpn.crGa841961da752 — merged by kp (Kristof Provost)
  • FreeBSDsa_len validation before bcopy/memcpy in 5 sys/net/ interfaces — D59140 — open, under review
  • RustCrypto/crypto-bigint — documentation clarification for xgcd_vartime delegation — PR #1333
  • IBM/Bank-of-Z — copy-paste defect in ABND-TIME seconds field across 23 CICS programs — PR #210 merged, closes Issue #205
  • Raspberry Pi Linux — resource leak and stack overflow in vc04_services (VTR-RPi-001, VTR-RPi-002) — resolved in PR #7576
  • generic-ecies — SharedInfo/1,2 analysis per SEC 1 v2.0 §5.1.3 — Issue #2, PR in preparation
  • Tailscale — FreeBSD port version representation divergence — Issue #18136
  • Tailscale — Parrot OS Echo misdetected as debian bullseye in install.sh — Issue #20960

Published Research


Methodology

Each project distinguishes observed facts from inference and projection under the CONFIRMED / PROBABLE / OBSERVED framework. Build reproducibility is verified under R-09: source → toolchain → artifact → evidence, with SHA-256 at each boundary.

Pinned Loading

  1. cfg-shield cfg-shield Public

    Feature flag semantic drift detector for Rust crates — detects #[cfg(feature)] gates that change security semantics outside the source file

    Rust

  2. cobol-shield cobol-shield Public

    Security hardening toolkit for COBOL legacy systems — invisible Unicode detection, format boundary analysis, source transformation integrity

    Python

  3. cryptofault cryptofault Public

    Legacy crypto weakness detector for OT/ICS environments

    Rust

  4. vtr-forensic-img vtr-forensic-img Public

    Hybrid Rust+Python forensic image analysis — binary parsing, chain of custody, adversarial test suite

    Python