Hello

My name is Jack Lloyd. I live in central Vermont, and do consulting work in a variety of areas including distributed systems programming, computer security reviews, and the design, implementation, and analysis of cryptographic systems. My resume is available for your viewing pleasure; contact me for a consultation if you feel my services would be of use to you.

My email address is lloyd@randombit.net. I have a PGP key you can use if you want to transmit something sensitive.

This site hosts my blog, bitbashing, as well as a number of mailing lists.

I bookmark interesting things on delicious, and I occasionally post on twitter.

Programming is fun

Some of my more active or interesting projects include:

• Botan is a fast and portable C++ crypto library
• FECpp is an implementation of a forward error correction code in C++
• grab_rss reads RSS/Atom feeds and sends you email for each new post
• VNCcrack is a dictionary-based cracker for the weak VNC authentication protocol

And over time I've collected a number of smaller or defuct projects.

Papers and presentations

• OpenCM: Early Experiences and Lessons Learned is a paper presented at Usenix 2003 describing some early lessons from building OpenCM
• An Analysis of RMAC describes weaknesses in a message authentication code that was proposed by NIST in 2002 as a possible standard
• Cutlass - Cryptographic Protection for Everyone's Voice and Data is a presentation about Cutlass I gave with several of my fellow developers at the ToorCon 2004 and SchmooCon 2005 security conferences
• HAS-160 is a Korean hash function; at the time no description of it existed in English, so I wrote one using information gleaned from the Korean-language standard that describes it
• Linux/x86 Compilers Comparison is a very outdated but still referenced comparison of several compilers for Linux on x86