Mangal Singh Rajpoot

• Datacom and Linux engineer with 8+ years of experience designing, developing, and optimizing high-availability network systems, embedded applications, and secure update/boot pipelines across SD-WAN, industrial, and carrier-grade environments.

Summary of Key Projects:

Project 1: Secure Boot for Hirschmann Devices

• Duration: 2 years
• Role: Senior Software Developer.
• Project Overview: Led the design and implementation of Secure Boot for industrial routers and switches, certifying devices for SL2 compliance, and strengthening network resilience for critical infrastructure.

Key Contributions:

• Developed a secure bootloader for Linux-based embedded systems, protecting against unauthorized firmware execution.
• Integrated cryptographic authentication (RSA, SHA, ECDSA), and enforced a chain of trust, validating each stage of the boot process.
• Embedded signature verification in U-Boot for the kernel, root file system, and critical components.
• Built command-line tools (CLI) for Secure Boot and Support Mode, enabling efficient management and diagnostics.
• Optimized WolfSSL cryptographic libraries and bootloader for enhanced security, and reduced boot time.
• Implemented rollback protection, failure recovery, and support mode for R&D.

Project 2: Signed Firmware Implementation for Secure Updates.

• Duration: 1 year
• Role: Senior Software Developer.
• Project Overview: Engineered digitally signed firmware updates to safeguard HiOS Linux-based devices, ensuring authentic, and tamper-proof upgrades for industrial routers and switches. Achieved enhanced security and facilitated SL2 compliance within critical infrastructure networks.

Key Contributions:

• Designed and integrated a secure PKI infrastructure for firmware signing and verification.
• Implemented robust digital signature checks, rejecting unsigned or invalid updates to guarantee code authenticity.
• Utilized RSA-2048, ECC algorithms, and SHA-256 to ensure data integrity and strong cryptographic security.

Project 3: Traceroute Enhancement for FatPipe Devices.

• Duration: 6 months.
• Role: Senior Software Engineer
• Platform: Linux.
• Project Overview: Developed a robust traceroute solution for FatPipe’s end devices to ensure accurate hop-by-hop IP reporting, and seamless diagnostics for corporate WAN reliability.

Key Contributions:

• Designed and implemented enhanced traceroute console output for precise hop identification and reliable neighbor discovery.
• Engineered ICMP packet capture and analysis tools to verify network paths and latency.
• Sole contributor for C-based software design, development, and troubleshooting.

Project 4: Network Tool Utility in GUI.

• Duration: 6 months.
• Role: Senior Software Engineer
• Platform: Linux.
• Project Overview: Integrated network diagnostic utilities (ping, traceroute, and tcpdump) into the GUI, enabling users to perform real-time connectivity verification and packet analysis directly from the GUI interface.

Key Contributions:

• Designed and implemented as a single contributor.