Software Engineer, SecureMachines

Hi, I'm Nithin Ram Kalava.

I'm a software engineer at SecureMachines in Bengaluru. I work on hardware security modules, mostly our Cloud HSM, high availability, and integrations with identity platforms. I'm most interested in system design. Back in college, I wrote pqc, a post-quantum cryptography library for JavaScript.

◈ System design◈ HSM, PKCS#11, JCE◈ Post-quantum crypto◈ Low-level systems
01

What I do at work

What I'm spending my time on right now.

SecureMachines

Software Engineer, Product team

Since Nov 2025

Cryptographic security · Bengaluru

  • I connected our HSMs to an identity platform. Next, I'm doing the same for a certificate management platform and another identity platform.
  • I set up the Google Cloud infrastructure that lets customers use Augha, a serial-port entropy device, as Entropy-as-a-Service. Buffering random data in the cloud dropped request latency from about 1.8 seconds to about 11 milliseconds.
  • I built our enterprise Cloud HSM so applications can reach our HSMs remotely while keeping the PKCS#11, KMS, and SignServer tools they already use.
  • I wrote a JCE provider so Java apps can talk to our HSMs. With the team, I also added Linux support using C shared libraries (.so) over PKCS#11.
  • I built high availability for our HSMs. Two units keep the same keys, and if one stops responding within a set timeout, all traffic switches over to the other.
Java / JCECPKCS#11HSMsHigh availabilitySignServerGoogle CloudLinux
02

Things I've built

A few projects I built outside of work.

FEATURED · 01

pqc

Post-quantum cryptography for JavaScript

A pure-JavaScript implementation of the NIST post-quantum standards (ML-KEM, ML-DSA, and SLH-DSA, covering FIPS 203, 204, and 205) made for the web with no native dependencies. I wrote it in college and don't maintain it anymore.

  • npm downloads3,493
  • ML-KEM keygens / sec2,300+
  • NIST standards3
How this happened

This one started with a Veritasium video on the quantum threat. I was intrigued, started reading about it, and found the math behind it (lattices, polynomial rings) interesting. NIST had just standardised its post-quantum algorithms and I was like, I want to try implementing these. So I went ahead and started.

It was not easy. I didn't even know how to read a spec. Half the language in it, no clue. So I started reading stuff, took help from AI to understand things, and slowly started building.

Somewhere in the middle I found out that Paul Miller, whose hashes library I was already using, had also made a post-quantum library. I read his code for hours, understood it, and essentially wrote that into mine.

In the end, I'm not maintaining it anymore. Several better ones have come out since.

JavaScript (ESM)FIPS 203/204/205Lattice cryptonpm
03

What I work with

The tools I use most.

Languages

JavaCPythonTypeScriptSQLBash

Cryptography & security

HSMsPKCS#11JCEKMSSignServerPost-quantum (ML-KEM, ML-DSA, SLH-DSA)

Cloud & infrastructure

Google CloudCloud RunCloud KMSFirestoreHA VPNAWSLinuxDockerCI/CD

Web & data

Next.jsReactNode.jsPostgreSQLREST APIsPandas

I also have AWS and Google Cloud training along with a few machine-learning and data-science certificates, though most of what I use daily came from building the projects above.

04

About me

The short version.

I studied computer science and joined SecureMachines straight out of college. Most of what I know came from building things and taking them apart: web apps, data pipelines, a machine-learning project, a cryptography library, and now hardware security modules.

I've worked across web, data, machine learning, cryptography, and low-level systems, and I like switching between them. The part I enjoy most is system design, especially close to the hardware, where a small mistake separates secure from broken.

Outside of work, I build PCs, run a small home lab, mess around with Linux, throw darts, and watch way too many films. I moved to Bengaluru for this job and I'm slowly picking up Kannada.

05

Get in touch

I read every message that comes in.

Happy to talk about cryptography, HSMs, system design, or any interesting systems problem. The fastest way to reach me is email.