Sign inSign in
WRITING

Notes on building and running systems

Engineering write-ups — architecture, security, and the occasional war story.

#auth · All writing

Categories
01

An encrypted handshake on top of TLS — and why I built one

Application-layer payload encryption for auth: ephemeral ECDH P-256 → HKDF → AES-256-GCM, with replay protection. What it buys you, and what it doesn't.Jun 5, 2026 · 2 min read

Tell me about your project and I'll advise on the fit, scope, and approach — architecture, APIs, data pipelines, cloud, and CI/CD — and the right level of automation for your goals, technical constraints, and timeline.

Let's build something reliable, end to end

ContactContact
BLCK. 01
BLCK. 02
BLCK. 03
Beta

I'm overloaded right now and can't give every detail the attention it deserves, so the site is still in beta. A polished release is coming soon.