Armando Hernandez
Research Engineer at Cloudflare, Inc.
San Francisco, California, United States
Summary
🤩
Rockstar🎓
Top SchoolArmando Hernandez is a Research Engineer based in San Francisco with a decade of experience building secure, high-performance cryptographic software for Internet communications. At Cloudflare he blends deep academic training (PhD) with practical systems engineering, contributing production-grade primitives and architecture-aware optimizations such as AMD64 implementations of X25519/X448 in the CIRCL library. He has hands-on full-stack open-source experience—refactoring the Privacy Pass extension build and hardening its signature verification—demonstrating attention to build reproducibility and client-side safety. Armando’s work emphasizes both algorithmic correctness and implementation defenses against subtle attacks, and he brings an uncommon combination of cryptographic research rigor and build/test hygiene to large-scale security systems.
9 years of coding experience
Bachelor of Science (B.Sc.), Bachelor of Science (B.Sc.) at Universidad Autónoma de San Luis PotosíMaster in Computer Science, Master in Computer Science at Centro de Investigación y de Estudios Avanzados del IPNDoctor of Philosophy (PhD), Doctor of Philosophy (PhD) at Universidade Estadual de Campinas
Spanish, Portuguese, English
Github Skills (16)
elliptic-curve-cryptography10
javascript10
assembly10
go10
modular-arithmetic10
x86-6410
cryptography10
browser-extension10
security10
typescript-types9
sha9
makefile9
typescript9
typescripts9
code-optimization9
Programming languages (16)
Github contributions (5)
cloudflare/circl
Sep 2018 - Jan 2023
CIRCL: Cloudflare Interoperable Reusable Cryptographic Library
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:12 releases, 532 reviews, 240 commits in 4 years 4 months
Contributions summary:Armando implemented and optimized cryptographic functions within the `cloudflare/circl` repository, a library focused on cryptographic primitives. Their contributions involved implementing X25519 and X448 on the AMD64 architecture, alongside the addition of several methods for modular reduction and arithmetic operations such as ScalarMult, and various operations that ensure the security of the functions by creating mechanisms to prevent attacks. Furthermore, the user worked on making improvements to the public key's validation.
ecdhsikecryptographicgoed25519
privacypass/challenge-bypass-extension
Jan 2019 - Nov 2022
DEPRECATED - Client for Privacy Pass protocol providing unlinkable cryptographic tokens
Role in this project:Full-stack Developer
Full-stack DeveloperContributions:7 releases, 63 reviews, 70 commits in 3 years 10 months
Contributions summary:Armando primarily focused on refactoring and improving the build process of the Privacy Pass extension, moving the build logic to a Makefile. They also worked on adding support for verifying the signature of commitments, which included changes to the configuration file and tests. Furthermore, the user made updates to the test vectors to be compliant with h2c draft-03 and removed unsafe innerHTML assignments.
cryptographytokensprivacyvoprfsecurity
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.