Personal page: Dr. Tomáš Rosa

I was born in 1974 in Prague, Czech Republic. I received M.Sc. degree in theoretical computer science at the Faculty of Electrical Engineering (FEE) at the Czech Technical University in Prague (CTU in Prague). The theme of my doctoral dissertation thesis reads “Modern Cryptology: Standards Are Not Enough” (online version of the Ph.D. thesis). It was a joint study program also at the Faculty of Mathematics and Physics of the Charles University in Prague and it was honored by the Best Doctoral Work Award of the Rector of CTU in Prague for the year of 2004. As an external lecturer and researcher, I closely cooperate with the Department of Algebra of the Faculty of Mathematics and Physics of the Charles University in Prague and with the Faculty of Information Technology of CTU in Prague.

Here is a personal page of my colleague and friend Dr. Vlastimil Klíma who I often cooperate on research projects with. You can also find some of our joint publications there.

Membership: Cryptoworld (CZ)

Quick Links: Cryptology For Practice (CZ), PicNic – HF RFID Emulator/Spyware

Work experience:

2004 – yet Senior Cryptologist with Raiffeisenbank (merged with eBanka in summer 2008)

Having successfully established information security department for eBanka (c.f. bellow), I enjoy working in this department as a senior cryptologist, or broadly speaking as senior information security expert. That involves solving information security problems using formal models and methods. A considerable part of my job is internal evaluation of security products. Obviously, any modern bank requires its systems to be under close and continuous security supervision during their design and maintenance. That presents me various very interesting problems from the area of modern cryptology. I do actively promote the approach based on applied cryptanalysis as a natural and important counterpart to applied cryptography. I am also focused on the security of embedded systems (including the smart phone platforms like Android, iOS, etc.), RFID, NFC, and EMV cards. Besides that I also somehow participate on design and implementation of the whole information security strategy of Raiffeisenbank. Through the Vienna headquarter, I also provide the aforementioned services for the whole group of Raiffeisen Bank International.

2003 – 2004 Information Security Director with eBanka

The objective of this job was to provide certain technology vision and leadership to start developing and implementing information security program in the bank. I was responsible for establishing a secure environment for its information assets. That included, but was not limited to: security surveys and risk analyses, development of security policies, standards, procedures and guidelines, design and analysis of security countermeasures, intrusion detection, incident handling, disaster recovery planning, etc. Besides this position I continued working on cryptology research, mainly in the area of applied cryptography and cryptanalysis. In fact, this job gave me very good inspiration for that, since I could easily recognize how modern cryptology fits into the whole puzzle of information security. Seeing the lack of essential cryptologic knowledge together with facing its practical consequences motivated our joint (with Dr. Vlastimil Klíma) effort on writing an easy to read, easy to understand, and easy to get serial on Cryptology for Practice.

2001 – 2003 Chief Cryptologist with ICZ Co.

As the chief cryptologist, I worked on projects in the area of applied cryptographic research. This mainly included joint work with the Czech National Security Authority (CNSA) on cryptographic devices designated to protect sensitive information at various security levels, including the TOP SECRET level (according to the law 148/1998 Coll., Czech Republic). In 2001 and 2003, on behalf of my results achieved, I received a special award of the board of directors and CEO of ICZ Co.

1997 – 2001 Development Specialist, Development Manager with Decros Ltd.

Here, as an information security specialist, I started working on an implementation and design of cryptographic countermeasures into various protecting devices. Since 1999, I led a small security team which was focused on the joint work with CNSA aimed on the development of special purpose cryptographic devices.

1993 – 1999 Independent Security Consultant & Publicist

Besides various consultations, studies and expert’s findings, I worked on a security devices evaluation in testing laboratories of the computer magazine CHIP (in Czech Republic).

Research area:

Cryptology, Side Channel Cryptanalysis, Cryptographic Algorithms and Protocols, Quantum Cryptography, Quantum Cryptanalysis, Risk Analysis, Mathematical Foundations of Information Security, Security Management, and Information Management

Lecture notes and publications (selected):

Research projects and publications (selected ones):

Other Activities:

Last update: November 11th, 2011.

tomas_dot_rosa (at) rb_dot_cz