Cryptography and distributed systems. Mostly interested in the practical side of post-quantum migration, and in how to verify security claims instead of trusting them.