Portrait of Shistata Subedi

Hi, I’m Shistata.

  • Distributed systems
  • Security
  • Databases
  • Verifiable storage
  • Authenticated data structures
  • Blockchains
  • Key transparency
  • Reliability

I’m a PhD student in Computer Science at the University of Oregon, working with Prof. Suyash Gupta. My research is in distributed systems, security, and databases.

I’ve worked on letting clients verify what a database looked like in the past (Smaran, SOSP 2026), keeping cryptographic proofs cheap when data changes often (HotSwap), and helping overloaded services recover (Cry-for-Help).

Before my PhD, I was a software engineer at Leapfrog Technology in Kathmandu.

Research

Smaran: authenticated time-travel queries - SOSP 2026

Asim Nepal*, Shistata Subedi*, Shubham Mishra*, Suyash Gupta, Aniket Kate, Hein Meling (*equal contribution)

Smaran means “remembering” in Sanskrit, which is pretty much the whole job.

When Alice texts Bob on WhatsApp, her phone asks the server for Bob’s encryption key. A compromised server could hand her a fake key and quietly read everything. Key transparency guards against this by keeping every key in a public log. But a lot of security questions are about the past: which key did Bob have when Alice sent that message in March? To answer honestly, the server has to show Bob’s whole key history for that period and prove it didn’t skip or change anything.

Blockchains have the same problem. If you want your Ethereum account’s history for 2024, today you mostly take a website’s word for it.

The usual way to prove these answers is one proof per version. Ask about a longer stretch of time and the proof grows with it. With Smaran, it doesn’t: the proof is the same small size whether you ask about one week or the last ten years.

Pick a start and an end version.

In our experiments, Smaran gets 5.7× the query throughput of CONIKS and OPTIKS for key transparency, and up to 589× the throughput of Merkle trees, Verkle trees, and Cauchyproofs on 2.6 million Ethereum blocks from 2024.

Abstract

Time-travel queries ask what data looked like at a past time or over an interval. Modern databases support time-travel queries, but this support is insufficient for applications that cannot trust the query server, such as secure messaging and decentralized applications, where clients need proofs that the returned results are correct. Existing approaches either require aggregating evidence from multiple auditors, incur per-step proof costs that scale linearly with history length, or impose massive storage and communication costs.

In this paper, we introduce Smaran, an authenticated data structure that enables servers to answer time-travel queries efficiently with a constant number of fixed-size proofs, independent of the query range. Smaran achieves this through a novel integration of segment trees with vector commitments, sidestepping scalability challenges as history grows via a hierarchical architecture, and avoiding redundancy by introducing versioned vector commitments.

What I’m working on now

HotSwap

3rd place, ACM Student Research Competition at SOSP 2026

In systems like Smaran, every stored value has a small proof, and values are stored in groups. Change one value and every proof in its group has to be recomputed. That would be fine if updates were spread out evenly. They aren’t. On Ethereum, a handful of accounts (exchanges, popular contracts) change constantly while most sit untouched for months, so a few busy values can keep the server recomputing proofs all day. Click around:

I’m working on keeping that cost down without weakening anything a client can check. More soon, hopefully with graphs.

Cry-for-Help

Some outages don’t end when their cause does. A traffic spike or a slow database pushes a service into overload. Requests time out, clients retry, and the retries become more load. The spike is long gone, but the service is still stuck, mostly because of its own retries. These are called metastable failures, and today the fix is usually someone getting paged at 3 a.m.

I want to know whether a service can tell it’s in this state and get itself out, so nobody has to wake up.

Earlier projects

MiniSpanner: a sharded, replicated database

2025 · Apache ResilientDB

Data is split into shards, and each shard is copied across several machines that agree on updates using PBFT, so things keep working even if some machines misbehave. We implemented the replication inside each shard and the coordination of transactions that span shards. Code

Publications

Other experience

Tools I use most: Go, C++, Rust, Python, Java, TypeScript, Geth, Pebble, Docker, SQL, Linux.

Awards

  • 3rd place (graduate), ACM Student Research Competition at SOSP, for HotSwap 2026
  • Lokey Award for Graduate Excellence, University of Oregon 2024 – 2025
  • Frank Vignola Microgrant, Eugene–Kathmandu Sister City Association 2025
  • COMPEX full undergraduate scholarship, Embassy of India 2019 – 2023

Education

  • University of Oregon, PhD student in Computer Science 2024 – now
  • Vellore Institute of Technology, B.Tech. in Computer Science 2019 – 2023

Reviewing

  • Reviewer, IEEE Transactions on Dependable and Secure Computing
  • Shadow reviewer, IMC 2025
  • Artifact evaluation committee, Middleware 2025

Outside work

I grew up in Nepal, where momo is practically a religion. Then I moved to Vellore, Tamil Nadu, for college and got my first proper culture shock. New language, new food, new everything. My Tamil vocabulary was limited, and my confidence in using it was wildly disproportionate. It took me a while to settle in. Dosa helped. A lot. Four years later, I left with a degree, a serious dosa addiction, and a lifelong appreciation for coconut chutney. No regrets.

After college, I moved back to Kathmandu to work at Leapfrog, which gave me four years' worth of missed momo and laphing (a cold, spicy Tibetan noodle dish) to catch up on. I took that responsibility seriously.

Now I'm in Eugene, Oregon. The mountains are beautiful, the trees are everywhere, and the momo situation is deeply concerning. I've been compensating with unreasonable amounts of tea. If you're ever visiting Kathmandu, please ask me where to eat. I have opinions.

Outside of work, I like traveling, trying new food, and making things by hand. I'm generally happy anywhere there's something new to explore or something good to eat.

My research involves proving things about the past. How many momo I ate last week is one historical record I'd prefer to leave unverified.

Contact

Email is the best way to reach me: shiss@uoregon.edu. I’m happy to talk about internships, research, or anything on this page.