My research is generally concerned with the security and privacy of cryptographic primitives and schemes, and by extension the resulting systems that are built using cryptography. I have constructed definitions of security and privacy for a number of systems and protocols, including electronic voting protocols and incoercible digital signature. Recently, I have been interested in the analysis of real-world protocols, particularly decentralised identity management systems, or so-called self-sovereign identity systems.