I am a PhD student at the Computer Security Lab of the Universidade Federal de Santa Catarina, researching novel combinatorial (un)ranking algorithms to generate random objects in quantum-safe cryptosystems.
On a personal note, I’m enthusiastic about astronomy, immersive sim games, IBM keyboards specifically older than myself and most songs with a saxophone line. 8)Publications
I am interested in quantum-safe cryptosystems and their applications, particularly hash-based signatures.
Click to see a list of works I have (co-)authored.
A. B. Kamers, P. O. Abel, T. B. Idalino, G. Zambonin, and J. E. Martina, Practical algorithms and parameters for modification-tolerant signature scheme. In Proceedings of the 24th Brazilian Symposium on Information and Computational Systems Security, pages 522–537, September 2024. | 🔗 📎 |
---|---|
G. C. Biage, G. Zambonin, T. B. Idalino, D. Panario, and R. Custódio, A concrete LIP-based KEM with simple lattices. IEEE Access, 12:16408–16420, January 2024. | 🔗 📎 |
L. Mayr, L. Palma, G. Zambonin, W. Silvano, and R. Custódio. Monitoring key pair usage through distributed ledgers and one-time signatures. Information, 14(10):523–537, September 2023. | 🔗 |
L. P. Perin, G. Zambonin, R. Custódio, L. Moura, and D. Panario. Improved constant-sum encodings for hash-based signatures. Journal of Cryptographic Engineering, 11(4):329–351, June 2021. | 🔗 📎 |
G. Zambonin. On the randomness of Rainbow signatures. Master's thesis. Universidade Federal de Santa Catarina, September 2020. | 🔗 📎 |
G. Zambonin, M. S. P. Bittencourt, and R. Custódio. Handling Vinegar Variables to Shorten Rainbow Private Keys. In J. Buchmann, A. Nitaj, and T. Rachidi, editors, Progress in Cryptology – AFRICACRYPT 2019, volume 11627 of Lecture Notes in Computer Science, pages 391–408, July 2019. | 🔗 📎 |
L. P. Perin, G. Zambonin, D. M. B. Martins, R. Custódio, and J. E. Martina. Tuning the Winternitz Hash-Based Digital Signature Scheme. In 2018 IEEE Symposium on Computers and Communications (ISCC), pages 537–542, June 2018. | 🔗 |
G. Zambonin. Otimização de desempenho do esquema de assinatura digital Winternitz [Performance optimization for the Winternitz digital signature scheme]. Bachelor thesis. Universidade Federal de Santa Catarina, June 2018. | 🔗 📎 |
Professional experience
I also work as a consultant, helping private and public institutions to solve complex problems related to information security. Before starting my doctoral studies, I was the technical lead of research & development for the Brazilian Digital Signature Standard.
See details about my previous experience here.
As part of the Computer Security Lab, I mainly delved into the official Brazilian Digital Signature Standard implementation of the Brazilian Public-Key Infrastructure (ICP-Brasil), and several PKI and digital signatures technical specifications.
-
[Jan/2020–Feb/2024] Technical lead and researcher
Supervised research and development efforts to add support for quantum-safe cryptography, JAdES and trusted lists to current standards, as well as further development of desktop, web and mobile tools used in ICP-Brasil to generate and validate digital signatures. -
[Jan/2018–Dec/2019] Software developer and systems administrator
Led a major development effort towards modernizing the official digital signature validation tool of ICP-Brasil, that resulted in a responsive new web interface, an API that enables headless/batch signature validation, enforced automated unit testing and continuous deployment practices. -
[Nov/2016–Dec/2017] Junior software developer
Developed a proof-of-concept signature validation module for PDF.js and a small library able to easily customize and instantiate most artifacts in a public-key infrastructure. -
[May/2016–Oct/2016] Junior software developer
Implemented support for CMS signatures (attached, detached or embedded in PDFs) in the official digital signature validation tool of ICP-Brasil.
Some details about my consulting work are given below.
-
[Apr/2024–Today] Consultant on digital signatures
In partnership with the National Operator of the Civil Registry of Brazil. I design and develop solutions to enhance digital signature adoption in civil registration and notary public processes. -
[Sep/2022–Mar/2023] Consultant on trusted lists
In partnership with the Electronic Government Network of Latin America and the Caribbean (Red Gealc). Developed tools to assist the usage of digital signatures in cross-border operations via trusted lists, pursuant to ETSI standards. 🔗 🔗 🔗 -
[Jan/2022–Mar/2022] Consultant on digital signature standards
In partnership with private companies. Developed a tool to validate digital diplomas, and accompanying files, according to the standards maintained by the Ministry of Education of Brazil. -
[Dec/2020–Mar/2021] Computer forensic examiner
In partnership with an intelligent transportation systems company. Processed a complex dataset with native GNU/Linux tools and used statistical techniques to verify the accuracy of the classification of pictures taken by speed enforcement cameras. -
[Oct/2018–Nov/2020] Security ceremony agent
In partnership with several Brazilian public institutions. Provisioned secure servers to run online elections through the end-to-end verifiable voting system Helios, with reduced need for human-computer interaction. -
[Sep/2018–Mar/2019] Researcher of quantum-safe blockchain protocols
In partnership with a novel blockchain platform. Co-developed a protocol to quantum-proof a blockchain, with secure substitution of wallets, replacement of cryptographic algorithms and zero downtime for the platform. -
[Sep/2017–Apr/2018] Computer forensic examiner
In partnership with an intelligent transportation systems company. Built a time series from various evidence sources forming a complex dataset, used to ascertain the authenticity and accuracy of pictures taken by speed enforcement cameras.
Academic activities
I frequently look forward to complementing my research & development work with other exciting projects.
This is mostly for my own record, but feel free to check it out.
Research visits
-
[Mar/2020–Jun/2020]
Mitacs-CALAREO Globalink
Research Award
Granted as the result of a project to study the security of Rainbow-like signature schemes at Carleton University.
Teaching assistantships
-
[Aug/2019–Nov/2019]
INE410134 - Post Quantum
Cryptography and Computation
Class no. 41000025DO/ME of the Graduate Program in Computer Science at UFSC. -
[Aug/2018–Dez/2018]
INE5601 - Mathematical
Foundations of Informatics
Class no. 01238A of the BSc in Information Systems at UFSC. -
[Mar/2015–Jul/2015]
INE5405 - Probability and
Statistics
Class no. 02208A of the BSc in Computer Science at UFSC. -
[Ago/2014–Dec/2014]
INE5405 - Probability and
Statistics
Class no. 02208A of the BSc in Computer Science at UFSC.
Involvement in BSc theses
-
[Jun/2024–Today] Co-supervision of L. C. T. Machado
BSc in Computer Science at UFSC. Thesis on modification-tolerant signature schemes in preparation. -
[Jun/2024–Today] Supervision of L. C. P. Sousa
BSc in Computer Science at UFSC. Thesis on optimizing Brazilian digital diplomas in preparation. -
[Mai/2024–Today] Supervision of M. P. Novais
BSc in Computer Science at UFSC. Thesis on automatic generation of curriculum graphs and schedules in preparation. -
[Mar/2024–Today] Supervision of A. P. Gretter
BSc in Computer Science at UFSC. Thesis on long-term integrity and reproducibility of program output via source-to-object analysis in preparation. -
[Mar/2024–Today] Supervision of E. Moraes
BSc in Computer Science at UFSC. Thesis on fuzzing cryptographic libraries in preparation. -
[Mar/2024–Today] Supervision of G. H. Meireles
BSc in Computer Science at UFSC. Thesis on elliptic curve digital signature schemes in preparation. -
[Mar/2024–Jul/2024] Co-supervision of L. G. Rosa
BSc in Computer Science at UFSC. Thesis named Modeling the SIM swap ceremony: integrating human behavior and formal analysis. -
[Mai/2023–Jul/2024] Co-supervision of J. P. C. Barbosa
BSc in Information Systems at UFSC. Thesis named Votação Eletrônica Pós-quântica Aplicada no Helios Voting [Post-quantum electronic voting in the Helios framework]. -
[Dec/2022–Today] Co-supervision of M. Tomaszewski
BSc in Computer Science at UFSC. Thesis on certificateless CMS signatures in preparation. -
[Jun/2023–Dec/2023] Member of evaluation board of T. V. Junckes
BSc in Computer Science at UFSC. Thesis named Prescrições médicas auto-soberanas: fortalecendo a segurança e a privacidade [Self-sovereign medical prescriptions: strengthening security and privacy]. -
[Aug/2022–Dec/2023] Co-supervision of A. B. Kamers
BSc in Computer Science at UFSC. Thesis named Homomorphic encryption: introduction and applicabilities. -
[Jun/2022–Jun/2023] Co-supervision of P. O. Abel
BSc in Computer Science at UFSC. Thesis named Esquema de assinatura digital tolerante a modificações [A modification-tolerant digital signature scheme]. -
[Jul/2021–Jul/2022] Co-supervision of G. C. Biage
BSc in Computer Science at UFSC. Thesis named Estudo de esquema de assinatura digital Dilithium [A study of the Dilithium digital signature scheme]. -
[Jun/2021–Mar/2022] Member of evaluation board of M. O. Saldanha
BSc in Computer Science at UFSC. Thesis named Protocolo ACME pós-quântico [Post-quantum ACME protocol]. -
[Sep/2019–Sep/2021] Member of evaluation board of R. S. A. Palma
BSc in Computer Science at UFSC. Thesis named Interoperabilidade em aplicações distribuídas: um estudo de DLTs como infraestrutura para hospedagem de aplicações web [Interoperability in distributed applications: using DLTs to host web applications]. -
[Aug/2019–May/2021] Member of evaluation board of L. M. Athayde
BSc in Computer Science at UFSC. Thesis named Implementing a library to provide Winternitz signatures with lightweight primitive using the Rust Programming Language. -
[Mar/2019–Dec/2019] Member of evaluation board of V. Macelai
BSc in Computer Science at UFSC. Thesis named Verificação de eleição utilizando blockchain [Verifiable elections with blockchain]. -
[Mar/2019–Dec/2019] Co-supervision of M. S. P. Bittencourt
BSc in Computer Science at UFSC. Thesis named Reducing keys in Rainbow-like signature schemes.
Miscellaneous activities
-
[Jun/2021] Speaker
("Cryptographic applications
of weak restricted integer compositions"),
25th Ontario Combinatorics
Workshop at Queen's University
Combinatorial view ofdoi:10.1007/s13389-021-00264-9
and preliminary improvements. -
[Mar/2021] Speaker ("Security analysis of the Rainbow-eta
signature scheme"), 2021
International Research Mobility Symposium at Carleton
University
Results of research conducted under the auspices of a received Mitacs-CALAREO Globalink Research Award. -
[May/2019–May/2020] Student
representative, Deputy and Full Councils of the Graduate
Program in Computer Science at UFSC
Elected by peers to be a member of the legislative bodies of the Program. Part of the Scholarships Committee. -
[Sep/2019–Oct/2019] Student
member, Electoral Commission for election of Director and
Associate Director of the Graduate Program in Computer Science
at UFSC
Audited the election and verified its results for the 2019–2021 term. -
[Apr/2018–Dec/2018] Co-organizer, 19th
Biology Academia
Week at UFSC
Developed an attendance system to accurately provide certificates to students and community. -
[Oct/2014] Lecturer ("Data analysis with
SEstatNet"),
13th SEPEX at UFSC
Held a workshop on data analysis and processing with a specialized tool developed inside the university.
Service
- Peer review in Designs, Codes and Cryptography.
- Peer review in the 8th International Conference on Cryptology and Information Security in Latin America (LATINCRYPT 2023).