Abdoul Fall

Cryptography engineer and cybersecurity specialist, I work on critical environments with high security, compliance, and availability requirements in the banking and digital trust sectors.

🎯 Expertise & Responsibilities

Operation and maintenance of multi-vendor shared HSM platforms

Organization and execution of cryptographic key ceremonies

L3 Support and cross-functional expertise on PKI, HSM, and cryptography topics

Management of critical incidents on shared cryptographic infrastructures

Contribution to secure platform architecture and design

Integration and security of critical payment flows: SEPA, Instant Payments, bank card payments

Writing of reference technical documentation: DAT, DEX, ceremony procedures, validation reports, PKCS#11 test sets

Assisting clients and technical teams with their cryptographic uses

Technological and regulatory watch: FIPS 140-3, eIDAS, ANSSI, post-quantum cryptography

🛠️ Technical Environments

HSM: Thales Luna, Bull Trustway Proteccio, Utimaco, Entrust nShield

KMS: Thales CipherTrust

Protocols & Standards: PKCS#11, KMIP, TLS/mTLS, X.509

PKI: ADCS, EJBCA

Systems: Linux RHEL, Windows Server

Development: Rust, C

Standards & Compliance: FIPS 140-3, eIDAS, RGS, ANSSI

🔐 Cryptography & R&D

Design and development of cryptographic primitives

Fully Homomorphic Encryption (FHE)

Private Set Intersection (PSI)

Multi-Party Computation (MPC)

Post-quantum cryptography

Secure software architecture

Applied cryptography research & development

I have also contributed to several advanced R&D projects, PKIs, and advanced cryptographic technologies applied to industrial use cases.

As a cryptography project manager at STET, a central player in European interbank transactions, I lead the transition to post-quantum cryptography while ensuring the cryptographic security of critical payment systems (SEPA, transfers, cards, ATMs).

My key missions:

Leading the strategic "PQC Migration" project: selection of post-quantum algorithms (Kyber, Dilithium…), compatibility analysis, roadmap development, and technical coordination.

Studies and proposals for robust architectures against classical and quantum threats.

Raising awareness and training SecOps teams on post-quantum cryptography.

Designing innovative solutions:

Root password management protocol based on Zero-Knowledge Proofs (ZaaS).

Fraud prevention solution based on homomorphic encryption for the insurance sector.

Supervising PKI activities: certificate management via Nexus and EJBCA, HSM monitoring, participation in key generation ceremonies.

Cryptographic monitoring and compliance: application of PCI DSS, PCI PIN, CB, VISA standards.

Hybrid post-quantum security scheme using CRYSTALS-Kyber for key exchange, and CRYSTALS-Dilithium and SPHINCS+ for signing and verifying the integrity of model-based federated learning updates. Zero-Knowledge Proofs (ZKP) integrated to block inference attacks on transmitted model parameters. A secure post-quantum aggregation protocol with interactive update validation, ensuring the authenticity of each contribution while preserving model gradient confidentiality. Advanced resilience to adversarial and quantum attacks through explainable AI algorithms that detect malicious or poisoned updates.