PaulĀ Elliott
Staff Software Engineer at Arm
Cambridge, England, United Kingdom
Summary
š¤©
RockstarPaul Elliott is a Staff Software Engineer based in Cambridge with eight years of experience building secure, production-grade systems. At Arm he focuses on backend and security engineering, bringing deep practical expertise in cryptographic libraries and secure coding practices. His notable open-source work on mbed TLS includes refactoring core components, closing buffer overflow vectors, hardening certificate verification, and adding constant-time functions to mitigate timing attacks. Paul combines systems-level understanding with a pragmatic engineering mindset, often improving legacy code to meet modern security standards. Colleagues rely on him for thoughtful, low-level fixes that have outsized impact on overall system safety.
8 years of coding experience
Github Skills (15)
c1710
it-security10
mtls10
ssl10
tls1210
c1110
tls1310
cryptography10
libtls10
security10
rsa9
error-handling8
memory-management8
x5098
test-automation7
Programming languages (6)
Github contributions (5)
Mbed-TLS/mbedtls
Apr 2020 - Dec 2022
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:2 releases, 838 reviews, 512 commits in 2 years 8 months
Contributions summary:Paul primarily focused on security-related improvements within the mbed TLS library. They were responsible for refactoring existing code to follow security best practices, modifying the core of the library to handle more secure operations, and eliminating various potential buffer overflow issues within the code base. Their commits included improvements to the internal workings of the certificate verification process, and the implementation of constant-time functions to protect against timing attacks. The user demonstrated expertise in the internal structure of the library, as well as strong understanding of cryptographic principles.
cryptography-libraryapisslcryptographycryptography-api
paul-elliott-arm/mbedtls
Mar 2020 - Dec 2024
An open source, portable, easy to use, readable and flexible SSL library
Contributions:411 pushes, 157 branches in 4 years 9 months
sslreadablessl-libraryreliableportable
Find and Hire Top DevelopersWeāve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.