Carlo Meijer

PhD candidate in Digital Security

Personal Consultancy Education Publications Contact

Personal

Hi. I'm a PhD candidate at the Digital security group at the Radboud University Nijmegen. I'm currently under supervision of Bart Jacobs.

My research focuses on analysis of already-deployed cryptographic systems in the wild. As of today, many people rely on cryptographic systems on a daily basis. Be it your through web browser, your public transport e-ticket, or your wireless router. Some of these systems have gone through extensive scrutiny. However, many have not.

Within this category, the systems are often difficult to analyze because proper documentation and/or source code is unavailable to the public. Sometimes the difficulty of analysis is even relied on for security, which is a terrible idea. Most of my research follows a pattern of uncovering the details and inner workings of a system through reverse engineering, and subsequently analyzing (and often breaking) its security.

Researcher at Midnight Blue

I am a founding partner at Midnight Blue. If you find my research interesting to read, you may want to consider hiring me as a consultant.

Education

2018/19 (Teaching Assistant): Operating Systems Security (NWI-IBC034)

2017/18 (Teaching Assistant): Hacking in C (NWI-IBC025) (course website)

2017/18 (Teaching Assistant): Operating Systems Security (NWI-IBC034) (course website)

Publications

Ciphertext-only Cryptanalysis on Hardened Mifare Classic Cards

Carlo Meijer, Roel Verdult

22nd ACM Conference on Computer and Communications Security (CCS 2015)
Denver CO, USA, pages 18-30. ACM, 2015.

 View paper

Scrutinizing WPA2 Password Generating Algorithms in Wireless Routers

Eduardo Novella Lorente, Carlo Meijer, and Roel Verdult

9th USENIX Workshop on Offensive Technologies (WOOT 2015)
Washington DC, USA. USENIX Association, 2015.

 View paper

Self-Encrypting Deception: Weaknesses in the Encryption of Solid State Drives

Carlo Meijer, Bernard van Gastel

40th IEEE Symposium on Security and Privacy (S&P 2019)
San Francisco CA, USA. IEEE, 2019.

 View paper

Where’s Crypto?: Automated Identification and Classification of Proprietary Cryptographic Primitives in Binary Code

Carlo Meijer, Veelasha Moonsamy, Jos Wetzels

Proceedings of the 30th USENIX Security Symposium (USENIX 2021)
Virtual Event. USENIX Association, 2021.

 View paper

All cops are broadcasting: TETRA under scrutiny

Carlo Meijer, Wouter Bokslag, Jos Wetzels

Proceedings of the 32nd USENIX Security Symposium (USENIX 2023)
Anaheim, CA, USA. USENIX Association, 2021.

 View paper

Contact Details

Carlo Meijer

Midnight Blue
Koninginneweg 158-2
1075EE Amsterdam