avatar

Shuhan Mirza

CS PhD Student
George Mason University
shuhan.mirza (at) gmail.com | mshuhan (at) gmu.edu

Applied Cryptography Metadata-Private Communication Digital Identity & Privacy

About Me

I am a Computer Science PhD student at George Mason University, co-advised by Dr. Foteini Baldimtsi and Dr. Giuseppe Ateniese. My research lies in applied cryptography and privacy, with a focus on practical protocols for metadata-private communication. My recent work, Oblivious Signaling, uses fully homomorphic encryption to provide receiver-message unlinkability and appears at USENIX Security 2026.

My broader interests include digital identity and privacy-enhancing systems. At Cloudflare Research, I worked with Dr. Ethan Heilman on Bring Your Own IdP, accepted at SSR ‘26. We developed delegated attestation protocols that let services authenticate users through existing identity providers without registering with each provider or requiring changes to the providers themselves. Before graduate study, I spent more than five years building, securing, and optimizing large-scale fintech systems used by millions of people.

My undergrad thesis was supervised by Dr. Md Sadek Ferdous. He has been a true inspiration in my research journey.

USENIX Security '26

Oblivious Signaling

Oblivious Signaling (OSig) is a single-server, FHE-based anonymous messaging scheme that hides message-recipient linkages. Unlike Oblivious Message Retrieval (OMR), whose retrieval cost scales with unread global traffic, OSig moves the privacy-preserving computation to delivery. Recipient checks are fixed-size inbox reads, while server work scales with the receiver anonymity set.

Paper PDF Poster Code

News

Publications

  1. Oblivious Signaling
    MKB Shuhan, F Baldimtsi, G Ateniese
    35th USENIX Security Symposium (USENIX Security '26), 2026
    Anonymous Messaging Metadata Privacy Fully Homomorphic Encryption
    Publisher PDF Poster Code BibTeX

  2. Bring Your Own IdP: Delegated Attestation for OpenID Connect
    MKB Shuhan, E Heilman
    Security Standardisation Research (SSR '26), 2026
    OpenID Connect Federated Identity Delegated Attestation
    Code Accepted

  3. Decentralised identity federations using blockchain
    MKB Shuhan, SM Hasnayeen, TK Das, MN Sakib, MS Ferdous
    International Journal of Information Security
    Federated Identity Blockchain Formal Verification
    Publisher PDF BibTeX

  4. Quarks: A Secure and Decentralized Blockchain-Based Messaging Network
    MKB Shuhan, T Islam, EA Shuvo, FH Bappy, K Hasan, C Caicedo
    IEEE International Conference on Cyber Security and Cloud Computing (CSCloud), 2023
    Secure Messaging Blockchain Hyperledger Fabric
    Publisher PDF Code BibTeX

  5. A Stylometric Dataset for Bengali Poems
    MKB Shuhan, R Dey, S Saha, MSU Anjum, TS Zaman
    International Conference on Natural Language Processing and Information Retrieval (NLPIR), 2022
    Bengali NLP Stylometry Research Dataset
    Publisher PDF Code BibTeX

  6. Dynamic management of identity federations using blockchain
    I Alom, RM Eshita, AI Harun, MS Ferdous, MKB Shuhan, MJM Chowdhury, MS Rahman
    IEEE International Conference on Blockchain and Cryptocurrency (ICBC), 2021
    Federated Identity Blockchain Decentralized Trust
    Publisher PDF BibTeX

  7. Analysis and detection of malware in Android applications using machine learning
    US Jannat, SM Hasnayeen, MKB Shuhan, MS Ferdous
    IEEE International Conference on Electrical, Computer and Communication Engineering (ECCE), 2019
    Android Security Malware Detection Machine Learning
    Publisher PDF BibTeX

Talks

Oblivious Signaling

Community and Education

FOSS

  1. Oblivious Signaling preview
    Oblivious Signaling
    Research artifact for metadata-private messaging that shifts the cost of private delivery from reading to sending.
    Rust, TFHE, Fully Homomorphic Encryption, Rayon
    Paper Code
  2. Bring Your Own IdP preview
    Bring Your Own IdP
    Research artifact for delegated attestation in OpenID Connect, with an identity wallet and a blind relay that work with existing identity providers.
    Go, Vue, OpenPubkey, OpenID Connect, Docker
    Code
  3. Surelink preview
    Surelink
    Safe short URLs for humans.
    Go, JavaScript, Gin, Vue, PostgreSQL, Redis
    Code App
  4. Simple PDF Generator API preview
    Simple PDF Generator API
    Document generation as a REST service, supporting PDF output from LaTeX and HTML templates.
    Java, Docker
    Code
  5. SUSTCast preview
    SUSTCast
    Campus radio station built for Shahjalal University of Science and Technology.
    Java, Python, Android, Icecast, Docker
    Code
  6. Notepad Web preview
    Notepad Web
    Privacy-first, browser-only plain-text editor with local persistence and cross-tab synchronization.
    Vue 3, TypeScript, IndexedDB, Docker
    Code App
  7. IP Geolocation and ASN API preview
    IP Geolocation and ASN API
    Docker-ready web service for IP geolocation and ASN lookup using an in-memory database and binary search.
    Go, Gin, Docker, IP-to-ASN
    Code
  8. Cryptography Online Tool preview
    Cryptography Online Tool
    Interactive browser tool for exploring hash functions, HMACs, and other cryptographic primitives.
    JavaScript, Vue, CryptoJS, Docker
    Code App
  9. Khilji's Folly preview
    Khilji's Folly
    A historical tower-defense game created for the js13kGames 2023 competition.
    TypeScript, JavaScript, HTML5
    Code Play
  10. Hot Pursuit Lite preview
    Hot Pursuit Lite
    A desktop 2D infinite-runner game centered on overtaking traffic and chasing a high score.
    Java, AWT
    Code
  11. Facebook Comment Automation preview
    Facebook Comment Automation
    A Selenium-based browser automation experiment for commenting on Facebook posts.
    Python, Selenium, Firefox
    Code
  12. Bengali Poem Dataset preview
    Bengali Poem Dataset
    A research dataset of 6,070 Bengali poems by 137 poets for stylometry and natural language processing.
    Python, Bengali NLP, Stylometry, Dataset
    Paper Code

Blog Posts

Media Coverage

Research

Services

Conference Review

Journal Review

Distinguished Juror


Powered by Jekyll and Minimal Light theme.