Nouman Ali Khan

Project Researcher

Tampere University

Full-time · Tampere, Finland

Engineered qryptotoken, a pure-Rust PKCS#11 loadable module integrating post-quantum algorithms including ML-KEM-768, ML-DSA-44/65/87 and the SLH-DSA family into Mozilla Firefox's NSS library as part of the EU Horizon Europe QUBIP project.

Implemented support for 11 distinct PQC algorithms across key encapsulation and digital signature families using libcrux and rustcrypto adapters.

Validated module interoperability against live Firefox TLS connections through both source-built and Flatpak browser environments.

Research Assistant

Tampere University

Full-time · Tampere, Finland

Forked and extended the kryoptic PKCS#11 implementation in Rust, re-architecting it as a Rust-only build to eliminate C dependencies and enable clean PQC algorithm integration through a modular adapter pattern.

Developed the cryptographic adapter layer connecting NSS's PKCS#11 interface to external PQC libraries including libcrux and rustcrypto.

Authored a master's thesis on cryptographic migration paths for long-lifecycle critical infrastructure systems, directly informing the QUBIP project's Internet Browsing pilot architecture.

Software & Security Engineer

Trillium Information Security Systems

Internship · Islamabad, Pakistan · Remote

Automated testing and reporting with Python scripts, reducing manual validation tasks.

Worked extensively on Linux environments and network stacks to identify and resolve security gaps.

Supported incident response and collaborated with teams on problem resolution under time-sensitive conditions.

Co-Founder

Self-employed · Remote

Investigated a live website compromise independently, tracing a SQL injection intrusion vector, containing the breach and restoring full system integrity within 30 hours.

Hardened the post-breach environment through access control fixes, server-side security configuration and application-layer input validation.

Applied attacker TTPs and intrusion analysis techniques from the incident to develop a structured offensive security practice.