# Martin Bosslet

> Freelance software architect, CTO-as-a-Service consultant, cryptography expert,
> and workshop trainer based in Germany, working internationally. Focus areas:
> cryptography (incl. post-quantum), digital signatures, secure web architecture,
> AI-assisted development, and developer education. Long-time contributor to
> Ruby OpenSSL.

The site is bilingual. Canonical English content lives under `/en/`, German
under `/de/`. The links below are the most useful entry points for understanding
what Martin offers and the technical writing he has published.

## About & services

- [Home](https://martinbosslet.dev/en/): expertise overview, services, testimonials, client list
- [Services](https://martinbosslet.dev/en/services/): CTO-as-a-Service, development & architecture, pentesting & security, workshops & seminars
- [Workshops](https://martinbosslet.dev/en/workshops/): Git, cryptography, post-quantum cryptography, AI-assisted development, AI-assisted legacy migration, Kotlin, Spring Boot, Java, Rails, GitOps with GitLab CI and Docker
- [Contact](https://martinbosslet.dev/en/contact/): how to engage Martin for consulting, audits, or training

## Blog (technical writing)

- [Breaking Murmur: Hash-flooding DoS reloaded](https://martinbosslet.dev/en/blog/2012/breaking-murmur-hash-flooding-dos-reloaded/): hash-flooding attacks against Ruby's MurmurHash implementation
- [Computing the Units Digit of a Power: a Constant-Time Algorithm Using a Little Number Theory](https://martinbosslet.dev/en/blog/2012/computing-the-units-digit-of-a-power-a-constant-time-algorithm-using-a-little-number-theory/): elementary number theory applied to a constant-time algorithm
- [How are Enumerators for arbitrary objects implemented?](https://martinbosslet.dev/en/blog/2012/how-are-enumerators-for-arbitrary-objects-implemented/): Ruby Fibers and Enumerator internals
- [OpenSSL PRNG is not (really) fork-safe](https://martinbosslet.dev/en/blog/2013/openssl-prng-is-not-really-fork-safe/): a subtle entropy bug in forked processes using OpenSSL
- [We need to sign Ruby Gems! But how?](https://martinbosslet.dev/en/blog/2013/we-need-to-sign-ruby-gems-but-how/): supply-chain signing approaches for RubyGems

## Reference

- [Sitemap (XML)](https://martinbosslet.dev/sitemap-index.xml): full machine-readable URL list
- [RSS feed (blog)](https://martinbosslet.dev/rss.xml): updates for new blog posts
- [Imprint](https://martinbosslet.dev/en/imprint/): legal disclosure required by German law
- [Privacy policy](https://martinbosslet.dev/en/privacy-policy/): data processing, hosting, analytics, GDPR rights

## Optional

- [Tags](https://martinbosslet.dev/en/tags/): browse posts by topic (Cryptography, OpenSSL, Ruby, Security, Mathematics, Number Theory, Algorithm, …)
- [Sitemap (HTML)](https://martinbosslet.dev/en/sitemap/): human-readable site overview
- [German edition](https://martinbosslet.dev/de/): same site, German content