Angelos Keromytis
More info
- Affiliation
- Columbia University, DARPA, Georgia Tech
- Known for
- IPsec in OpenBSD, OpenBSD Cryptographic Framework, KeyNote
Greek-American researcher who wrote much of OpenBSD's IPsec stack and turned Bellovin's distributed firewall from a paper into working code.
While still a student in the mid-1990s, Keromytis co-wrote the IPsec implementation in OpenBSD with John Ioannidis. In 1999 came KeyNote (RFC 2704), a trust-management language written with Matt Blaze among others, and in 2003 the OpenBSD Cryptographic Framework with Theo de Raadt — a common interface that let the kernel hand crypto off to hardware accelerators.
In 2000 he, Ioannidis and Steve Bellovin showed that a firewall need not sit at the network edge: policy can be issued centrally and enforced on every host. The idea was awkward for anyone selling boxes. He went on to a professorship at Columbia, a stint as a DARPA programme manager and a chair at Georgia Tech.