
Your 4-Digit PIN Is Fine: Device-Bound Keys on ESP32-S3
Why PBKDF2 iterations can't protect a 4-digit PIN on a microcontroller, and how an eFuse-HMAC device secret plus HKDF stops offline brute force.
Embedded Firmware & Software Engineer.
Bridging the gap between firmware, software, and applied research.
I'm a multidisciplinary engineer who enjoys solving problems where embedded firmware, software and applied research meet. My path runs from academic research in acoustics to industrial firmware development — and that breadth is what motivates me the most.
I thrive on integrating hardware and software end to end. I'm an active Open Source contributor whose tools are used by developers around the world, and a passionate self-hoster, constantly refining my homelab and building tools for the community. Check out my CV to see the full journey.


Why PBKDF2 iterations can't protect a 4-digit PIN on a microcontroller, and how an eFuse-HMAC device secret plus HKDF stops offline brute force.

How a hardware password manager authenticates every vault file before it decrypts: encrypt-then-MAC, verify-before-decrypt, and fail-closed reads.

A build-time generator packs firmware UI translations into one string pool indexed by uint16 offsets, halving the index table on a 32-bit MCU.
Open source GitLab MCP server for AI assistants: 2-tool dynamic find/execute over 860+ GitLab actions (1,000+ Enterprise), stdio/HTTP/OAuth, safe/read-only modes.
[Python3] Octave-Band and Fractional Octave-Band filter. For signal in time domain.
Bash script to update, create or delete IPv4 and IPv6 records in @Cloudflare.
Plantilla LaTeX para la elaboración de TFG y TFM en la Escuela Politécnica Superior de la Universidad de Alicante