Muhammad Shaheer Bin Junaid

Post-Quantum & Applied Cryptographer

mshaheerbjunaid.com · ORCID 0009-0002-4088-6232 · GitHub mshaheerjunaid · LinkedIn in/msbj · Medium @msbj · ORCID 0009-0002-4088-6232

Profile

Cybersecurity practitioner and independent researcher focused on post-quantum cryptography in practice: verifying migration in compiled software, measuring post-quantum TLS deployment, designing hybrid post-quantum encryption with self-hosted key custody for small organisations, and quantum-security monitoring. Author of three single-author arXiv preprints (2026) and five open-source security tools.

Experience

Dec 2025 – present

Chief Technology Officer

Headline Recorder

Leads engineering at a Karachi news publisher covering Pakistan's business and economy. The work covers its custom WordPress platform and the infrastructure and security behind it.

Mar 2025 – present

Founder & Managing Director

Corven Watches

An independent brand of limited-edition luxury watches, founded in 2025.

Jun 2024 – present

Cybersecurity & GRC Consultant

Independent consultancy

Security and governance work for Pakistani organisations, mostly software houses and hospitals, including the first steps of their move to post-quantum cryptography.

Jan 2023 – present

Founder & Managing Director

Pearl Construction Co.

A construction firm whose completed work includes renovations of government schools.

Education

2022 – 2026

Bachelor of Science, Computer Science

University of the People

2019 – 2022

Advanced Diploma, Software Engineering

Aptech Pakistan

Research

Published

Post-Quantum Content Provenance for a Production News Platform

Muhammad Shaheer Bin Junaid (2026). Post-Quantum Content Provenance for a Production News Platform. Zenodo. https://doi.org/10.5281/zenodo.23629648

Preprint

Quantum Machine Learning Protection of Military Quantum Key Distribution Against Cryptographically Camouflaged Attacks

Muhammad Shaheer Bin Junaid (2026). Quantum Machine Learning Protection of Military Quantum Key Distribution Against Cryptographically Camouflaged Attacks. Preprint. arXiv:2610.04543 [cs.CR]. https://doi.org/10.48550/arXiv.2610.04543

Preprint

A Hybrid Post-Quantum Encryption Architecture with Self-Hosted Key Management for SME Cloud Data Protection

Muhammad Shaheer Bin Junaid (2026). A Hybrid Post-Quantum Encryption Architecture with Self-Hosted Key Management for SME Cloud Data Protection. Preprint. arXiv:2608.26777 [cs.CR]. https://doi.org/10.48550/arXiv.2608.26777

Preprint

Static Detection of Post-Quantum Cryptographic Algorithms in Stripped Binaries for Digital Forensic Examination and Migration Assurance

Muhammad Shaheer Bin Junaid (2026). Static Detection of Post-Quantum Cryptographic Algorithms in Stripped Binaries for Digital Forensic Examination and Migration Assurance. Preprint. arXiv:2608.25122 [cs.CR]. https://doi.org/10.48550/arXiv.2608.25122

Selected projects

Released

Kestrel

Static detection of ML-KEM and ML-DSA inside stripped, statically linked and obfuscated binaries, by fingerprinting the number-theoretic transform constant tables the algorithms cannot run without.

Released

HollowLock

A local tool that runs real TLS 1.3 handshakes against a domain and reports whether its post-quantum key exchange is enforced, merely available, or absent, with a cryptographic bill of materials and a signed PDF report.

Prototype

Quantum Cloud Guard

A software-only, three-layer architecture for small and medium-sized enterprises: client-side hybrid post-quantum encryption, self-hosted key custody with ML-DSA-87-signed keys, and an application-layer abuse gateway.

Experiment

Ghillie

A decoy-state BB84 telemetry simulator and quantum-kernel detector for attacks hidden in the noise of a quantum key distribution link.

Prototype

Panopticon

Behavioural abuse detection that finds coordinated attacks by clustering on behaviour and JA4 TLS fingerprints instead of IP address, with a population check that flags fleets that look too unique to be real.

Generated from the live site on 27 October 2026.