Doug Engert is a retired software engineer with 11 years of hands-on experience specializing in smart card security, PKCS#11, and low-level cryptographic engineering. Based in Rochester, NY, he made significant open-source contributions to the well-known OpenSC project and its libp11 PKCS#11 wrapper, improving ECDSA/ECDH support, OpenSSL compatibility, and fixing cryptographic vulnerabilities. His work demonstrates deep familiarity with token middleware, certificate and key handling, and robust error management in security-critical code. Even in retirement he retains practical expertise in debugging subtle reference-count and interoperability issues across crypto stacks. Colleagues would describe him as a meticulous backend developer who favors correctness and resilience in cryptographic systems.
Open source smart card tools and middleware. PKCS#11/MiniDriver/Tokend
Role in this project:
Back-end Developer & Security Engineer
Contributions:300 reviews, 145 commits, 153 PRs in 8 years 4 months
Contributions summary:Doug made significant contributions to the OpenSC project, primarily focused on enhancing and securing smart card tools. Their work involved fixing cryptographic vulnerabilities, modifying the `pkcs11-tool` to support ECDH operations for better compatibility with various PKCS#11 implementations, and improving the PIV driver's handling of card resets and user authentication. The contributions show expertise in PKCS#11, smart card security, and low-level cryptographic operations. The user also added fixes for various issues related to the handling of keys and certificates.
Contributions:9 reviews, 25 commits, 19 PRs in 7 years 8 months
Contributions summary:Doug primarily worked on the `libp11` library, a PKCS#11 wrapper. Their contributions included fixing issues related to ECDSA and OpenSSL, specifically addressing reference count problems and integrating ECDSA functionality. They also improved the handling of certificate attributes and made adjustments to include and update pkcs11.h to match the OpenSC version. Furthermore, they refactored code related to ECDH derive and OpenSSL 1.1 compatibility, adding more robust error handling.
pkcs11cryptographyhsmtpmwrapper-library
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.