David Berard
Reverse Engineering Team Technical Leader at Synacktiv
Greater Toulouse Metropolitan Area France
Summary
🤩
Rockstar🎓
Top SchoolDavid Berard is a Reverse Engineering Team Technical Leader with 16 years of experience in embedded systems security, currently driving red-team style evaluations and technical direction at Synacktiv. His background includes deep TrustZone, TEE, and payment application assessments, low-level ARM/ARM64 analysis, and practical exploitation techniques such as cache attacks and fault injection. A pragmatic engineer with hands-on reverse engineering across x86, ARM, PowerPC and MIPS, he pairs leadership with continued individual contributor work in tooling and automation. His open-source contributions—like adding cryptographic tooling and modulus extraction to the pem Node.js library and improving an IDA Pro plugin to detect crypto constants via Yara—reflect a focus on reproducible, test-driven crypto analysis. Based in Greater Toulouse, he blends formal evaluation experience (CSPN, VISA/Mastercard HCE) with past roles in high-availability network architectures and R&D, giving him a rare mix of systems, security and operational depth.
16 years of coding experience
7 years of employment as a software developer
Master 2 Système de Télécommunications et Réseaux Informatiques (STRI), Master 2 Système de Télécommunications et Réseaux Informatiques (STRI) at Université Paul Sabatier Toulouse IIIDUT Réseau et Télécommunications, DUT Réseau et Télécommunications at IUT de Béziers
French, English
Github Skills (18)
javascript10
ssl10
tls1210
cert10
plugin-development10
tls1310
plugin10
certificate10
cryptography10
nodejs10
unit-test10
python9
binarydiff9
ida9
reverse-engineering9
Programming languages (7)
Github contributions (5)
polymorf/findcrypt-yara
Mar 2017 - Jan 2022
IDA pro plugin to find crypto constants (and more)
Role in this project:
Back-end Developer
Back-end DeveloperContributions:35 commits, 24 PRs, 35 pushes in 4 years 10 months
Contributions summary:David primarily contributed to the development of a plugin for the IDA Pro disassembler, specifically focusing on identifying cryptographic constants within binaries using Yara rules. Their work involved writing and modifying Yara rules to detect various cryptographic algorithms and constants. The user added support for user-defined rules and enhanced the plugin's functionality by merging code from external sources and improving the search process.
crypto
Dexus/pem
Jun 2013 - Jun 2013
Create private keys and certificates with node.js
Role in this project:Back-end Developer & QA Engineer/Test Automation Engineer
Back-end Developer & QA Engineer/Test Automation EngineerContributions:7 commits in 1 day
Contributions summary:David primarily focused on enhancing the functionality and reliability of the `pem` library. Their contributions involved adding a new function, `getModulus`, to extract the modulus from certificates, CSRs, and private keys. They implemented unit tests to validate the `getModulus` function, ensuring it produces correct results and integrated validity timestamps to the certificate info extraction. These changes demonstrate a strong focus on cryptographic operations and rigorous testing practices.
nodejsprivate-keycertificatejavascriptcsr
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.