Security researcher & engineer | Building tools for secure systems, privacy, cryptography, and fun
- 📝 Blog: ffoerg.de
- 📘 Publications: Google Scholar
- 💬 Contact: LinkedIn | Bluesky | X
| Project | Description |
|---|---|
| tpm-fido2-prf | FIDO2/WebAuthn platform authenticator with PRF support backed by a TPM for passkey encryption written in Go for Linux (contributor) |
| tpm-fido2-extension | Browser extension for FIDO2/WebAuthn platform authenticator with PRF support backed by a TPM for passkey encryption (contributor) |
| AES.jl | AES implementation in Julia supporting common cipher modes of operation |
| SSH-Weak-DH | Scan SSH servers for weak Diffie-Hellman groups |
| mbedtls-fuzz | Fuzz ARM's mbed TLS library using AFL++ |
| Project | Description |
|---|---|
| dockerfiles | Various Dockerfiles for Podman and Docker containers, including OpenSSH client, Tor, dnscrypt-proxy, and Tailscale |
| aed | UNIX command-line tool that encrypts or decrypts its input using AES in CBC mode with a key derived from a password (unmaintained proof of concept) |
| EncSync | Network storage service that provides client-side encryption and supports group file sharing (unmaintained master's thesis project) |
| image-encryption | Implementation of a color image encryption algorithm using spatial bit-level permutation and high-dimension chaotic system for the CPU/GPU in C/Julia/CUDA (unmaintained) |
| Project | Description |
|---|---|
| sct | X11 command-line utility xsct to "set color temperature" (sct) of screens Alpine - Arch - Debian - NixOS - Ubuntu |
| edi | Command-line interface for interacting with artificial intelligence chatbots through the OpenAI-compatible Poe API |
| macos-qemu-rpi | Emulate a Raspberry Pi on macOS using QEMU--ideal for ARM exploitation learning, such as in the Azeria Labs tutorial or similar guides |
| thinkpad-scripts | Emulate three trackpad buttons with ThinkPad models that lack them and disable movements for part of the touchpad to prevent accidental pointer movements on Ubuntu |
| Project | Description |
|---|---|
| cournol | Educational tool for analyzing analyzing absolute supply monopolies and polypolies (high school project) |
| CoinTossingGUI | Simulates a sequence of coin tossing events and plots the corresponding 2-D random walk |
| LampSort | Java implementation of Lamport's version of quicksort |
| conqueue | Thread-safe and re-entrant double-ended queue (linked list) implementation in C |
| sws | Simple UNIX webserver framework supporting IPv4 and IPv6 |
| ls | Simplified clone of the UNIX tool ls which lists directory contents (unmaintained proof of concept) |
| Project | Description |
|---|---|
| algo | Scripts to spin up a personal Wireguard or IPsec VPN in the cloud |
| confer-proxy | Proxy for the confer.to end-to-end encrypted artificial intelligence chat service |
| confer-image | Small and reproducible Linux images meant to run in a TEE (Trusted Execution Environment) for confer.to |
| firejail | Linux sandbox tool to run applications in a restricted environment |
| pi-hole/docs | Official documentation for Pi-hole |
| antisamy | HTML sanitization library |
| XSStrike | XSS scanner |
| htap | Crawler for Single Page Application (SPA) web apps |
| node-opentoken | OpenToken library written in Node.js |
| vim-clevertab | Simple tab completion plugin for vim |
| emu-ex-plus-alpha | Game console emulation system |
| spotitySpeedExtension | Chrome extension to change the playback speed on Spotify |