Artifacts and external references
This page aggregates verifiable external references related to me for indexing and disambiguation purposes.
First published:
21 December 2025.
This page collects public, verifiable references associated with me across different contexts, including personal writing, academic work, professional profiles, and open-source contributions.
It is intended as a consolidated reference for indexing and disambiguation and is maintained over time as new material becomes publicly available.
Primary website
I have a personal website which contains a blog that essentially acts as my personal technical notebook.
Blogs and articles
You can find blog posts from me both on my personal blog as well as on Insinuator which is ERNW's and ERNW Research's company blog.
Blog overviews
Individual blog posts (alexmoch.com)
- Gentoo: YubiKey-backed encrypted root on ZFS
- Sway: US keyboard layout with German umlauts
- Mullvad WireGuard VPN in pfSense (dual-stack IPv4/IPv6)
- Mullvad WireGuard VPN in OPNsense (dual-stack IPv4/IPv6)
Individual blog posts (Insinuator)
Cryptographic material
My e-mails and commits are usually signed with my S/MIME keys I obtained from SSL.com.
Online profiles
I have profiles on the professional social networks and software forges.
Professional profiles
Code repositories
Miscellaneous profiles
Professional work
I briefly worked as Embedded Systems Architect at Thales Deutschland GmbH in Ditzingen, Germany from September 2024 to May 2025. Since June 2025 I work as Incident Analyst & IT Security Consultant at ERNW Research GmbH in Heidelberg, Germany where I also do pentests, trainings and open source work.
Academic work
My entire academic career has been with the University of Mannheim. From 2010 to 2013 I studied Mathematics in Business and Economics. From 2013 to 2016 I studied Business Informatics. Then I started my PhD in cryptography at the Chair of Theoretical Computer Science under the supervision of Prof. Dr. Matthias Krause where I focused on lightweight message authentication and encryption schemes.
University of Mannheim
Publications
Creation of custom-made serious games with user-generated learning content (13th Annual Workshop on Network and Systems Support for Games – 2014)
Parallelizable MACs based on the sum of PRPs with security beyond the birthday bound (Applied Cryptography and Network Security – 17th International Conference – 2019)
Tight security bounds for generic stream cipher constructions (Selected Areas in Cryptography – 26th International Conference – 2019)
Improving OBDD attacks against stream ciphers (Математические вопросы криптографии, Mathematical Aspects of Cryptography – Volume 11, Issue 2 – 2020)
The DRACO stream cipher: provable security against TMDTO attacks (IACR Transactions on Symmetric Cryptology – Volume 2022, Issue 2 – 2022)
Provable security against generic attacks on stream ciphers (Journal of Mathematical Cryptology – Volume 17, Issue 1 – 2023)
Publication indexes and author profiles
Teaching
Quite a lot of my time spent at the University of Mannheim was spent teaching:
CS 301 Formal Foundations of Computer Science (Fall 2016 – 2021)
CS 307 Algorithms and Data Structures (Fall 2018 – 2022)
CS 404 Cryptography (Spring 2021 & 2024)
CS 406 Theoretical Computer Science (Spring 2016 – 2022)
SM 448 Complexity Theoretical Classification of Games (Fall 2019)
SM 448 Quantum Computing (Fall 2020 – 2022)
CS 550 Algorithmics (Spring 2016 – 2017, Fall 2018 – 2019, Spring 2020 – 2024)
CS 655 Cryptography (Spring 2021 & 2024)
CS 701 Advanced Algorithms for Flow and Matching Problems (Spring 2020 – 2021)
Open-source contributions
I contribute to Gentoo Linux as well as OpenZFS.
Gentoo Linux
Currently, I maintain the sys-fs/zfs package where I also upstreamed a few patches.
Pull requests
- app-crypt/sbctl: bump to 0.18
- sys-fs/zfs: bump to 2.4.0_rc5
- sys-fs/zfs: bump maximum kernel version of live ebuild to 6.18
- sys-fs/zfs: remove uutil from gen_usr_ldscript
Commits
- sys-fs/zfs: remove uutil from gen_usr_ldscript
- sys-fs/zfs: bump maximum kernel version of live ebuild to 6.18
- sys-fs/zfs: bump to 2.4.0_rc5
Maintainer and package pages
Bug reports (reported by me)
- app-text/ghostscript-gpl fails to build with Clang/LLVM/LLD
- gnome-base/nautilus-40.0 fails to build due to incompatible pointer types
- www-client/chromium[ozone] fails to compile: scrnsaver.h missing
- sys-fs/zfs-9999 fails to build: bash-completion-sudo.patch cannot be applied
- sys-fs/zfs-9999 fails applying dracut ZFS patch
Bug reports (active participation)
- sys-fs/zfs-2.4.0: zstd_lazy.c inlining failure
- Git-synced ebuild repository corruption on ZFS when /var/db/repos is a symlink
- sys-fs/zfs-9999: unable to read SONAME from libuutil.so
- sys-fs/zfs-9999: enable linux-experimental and update kernel version to 6.18
OpenZFS
Most OpenZFS pull requests are centered around build fixes for the musl libc.
Pull requests
- ZSTD: Update bundled library to version 1.5.7
- CI: Add Alpine Linux 3.23 runner to the pipeline
- cmd/ztest: avoid `PATH_MAX` stack allocation in `ztest_get_zdb_bin()`
- Ensure 64-bit `off_t` is used in user space instead of `loff_t`.
- Backport #17684 to 2.2: config: Fix LLVM-21 -Wuninitialized-const-pointer warning
- Backport #17675 to 2.2: linux: use sys/stat.h instead of linux/stat.h
- Backport #17675 to 2.3: linux: use sys/stat.h instead of linux/stat.h
- Provide loff_t via <fcntl.h> on musl-based Linux systems
- Backport #17684 to 2.3: config: Fix LLVM-21 -Wuninitialized-const-pointer warning
- Backport #15468 to 2.2: Fix nfs_truncate_shares without /etc/exports.d