CagsTech

cat ~/proof-of-work

Selected work in networking, cryptography, embedded systems, and secure infrastructure — with emphasis on constrained environments, real-world reliability, and documented design decisions.

Featured lwIP preview

lwIP

Lightweight TCP/IP, TLS 1.3, and Ethernet support for the TI-84+ CE.

  • lwIP-CE a full internet connection over USB to a device that doesn't natively provide it with no hardware modification.
  • Includes a compact TLS 1.3 stack, using the same modern encryption that drives the padlock icon in the browser. The stack includes a statistically validated RNG built from electrical noise in calculator memory, plus core cryptographic primitives such as AES-128-GCM, SHA-256, HKDF/HMAC, X25519 ECDHE, and RSA-2048 signature verification for certificate validation.
  • Tested like professional security software. Every non-upstream addition has test coverage, every cryptographic primitive is validated against NIST-published CAVP test vectors, a timing analysis suite, and static analysis scans every line of code added to the project.
wip
View project →
Featured CryptX preview

CryptX

Cryptographic library for the TI-84+ CE.

  • Implements well-established, publicly specified cryptographic standards — AES, RSA, SHA-256, HMAC, PBKDF2, and elliptic curve primitives. No self-rolled crypto; everything traces back to NIST and RFC specifications.
  • Brought modern cryptography to a platform that had none. Before CryptX, the TI-84+ CE had no serious cryptographic library. Developers who needed encryption had no viable option. CryptX changed that.
  • The starting point of a longer journey. CryptX predates the formal testing and validation pipeline that lwIP-CE introduced. It was where the hard lessons about cryptographic rigor were learned — lessons that directly shaped the stricter engineering standards applied to lwIP-CE's TLS implementation.
released
View project →
Featured Blast File Integrity Software preview

Blast File Integrity Software

File-integrity and malware-scanning utility for the TI-84+ CE.

  • Uses SHA-256 hashing and maintains an AIDE-style database of known good hashes for programs and appvars.
  • Accepts a community-sourced curated virus definitions file and scans executables for signatures from the definitions file.
  • Prone to false positives due to inability to distinquish executable sections from benign data.
released
View project →

other work

CagsCalcLabs preview

CagsCalcLabs

websiteself-hostedphp

A self-hosted site dedicated to networking, security, and development tools for the TI-84+ CE calculator. Designed, built, and maintained independently, CagsCalcLabs serves as a platform for open-source releases, documentation, and service offerings related to the platform.

  • Role: Owner, Developer
  • Stack: HTML, CSS, JS, PHP (custom), no framework dependencies
  • Hosting: Self-hosted on business-residential infrastructure with hardened server config
This is Our Story preview

This is Our Story

websiteclientwordpress

Assisted with light PHP scripting, plugin configuration, and routine WordPress core + theme updates for an existing site maintained by the client.

  • Role: Support / Maintenance

technical writing

CryptX Technical Whitepaper preview

CryptX Technical Whitepaper

publicationti-84+ cesecurity

A technical document offering comprehensive API documentation tailored for developers of all experience levels, alongside an in-depth analysis of the CryptX library for peer review.

lwIP-CE Technical Whitepaper preview

lwIP-CE Technical Whitepaper

publicationti-84+ cesecurity

A technical document offering an overview of the lwIP port — threat modeling, risk assessment, entropy justification, and datasets — tailored for developers of all experience levels and intended for peer review.

ls -l ~/certifications

cat ~/job-inquiry.txt

See something you like and want to discuss a job? My resume is here. Fair warning: if you ask for a cover letter, you're getting the output of ollama run qwen:2b "write me a cover letter". I don't make the rules.