Buildroot Linux on Raspberry Pi CM4/CM5. The manufacturer owns the secure-boot chain and signed RAUC A/B updates. Customer applications are signed with the DDM885R over PKCS#11, then verified and run sandboxed as systemd portable services.
Firmware image signing with MCUBoot and PKCS#11, and a CBOR-encoded RPC layer for NuttX, for the DDM885R contactless reader used in transport and EV charging.
SPI command firmware, virtual prototype testing and secure bootloading for a new generation of automotive radar chips.
MISRA and cybersecurity static analysis, generated register access code and Python lab automation.
JSON-based device configuration on an embedded Linux gateway aligned with the HMS platform.
Port from Cortex-M3 to Cortex-M4 with new capacity measurement and a refactored codebase.
EMV contact and contactless payment applications for Verifone, Ingenico and Atos terminals, with ISO 8583 and SPDH host protocols.