Daniel J. Bernstein

@hashbreaker

Designing cryptography (deployed now: X25519, Ed25519, ChaCha20, sntrup, Classic McEliece) to proactively reduce risks. Coined phrase "post-quantum" in 2003.

Trying Mastodon: @[email protected]

cr.yp.to/djb.html

Joined July 2009

Pinned
Daniel J. Bernstein
@hashbreaker
Dec 27, 2024
Pleased to announce PQConnect: pqconnect.net Easy-to-install software for your Linux box (more OSes coming later) to protect network applications against future quantum computers. Paper will appear at NDSS 2025. Joint work with @hyperelliptic, Jonathan Levin, @bo_yin.
Daniel J. Bernstein
@hashbreaker
Aug 7
Daniel Apon in nist.pqcrypto.org/foia/20250416/… re eprint 2021/1093: "they took their shot at Dilithium and only just missed". Funny to watch Chris Peikert now insisting that people would never use such shooting language.
Daniel J. Bernstein
@hashbreaker
Aug 7
I think that for secure software it's more useful than ever to measure, minimize, and verify the TCB. State a security goal (e.g. "my screen will show 'From: Alice' only for messages from Alice"); restructure software with a tiny nucleus enforcing this goal against all other LOC.
Daniel J. Bernstein
@hashbreaker
Aug 7
Saving a screenshot of this one for the next time I give a talk about cryptographic risk management.
Daniel J. Bernstein
@hashbreaker
Aug 6
If archive.cr.yp.to/2026-08-06/07:… collapses upon examination, lattice-based cryptographers will say "See, we dodged another bullet"; but aren't all the bullets more than a bit terrifying? Use the largest parameters you can afford; keep the ECC seatbelt; keep investing in alternatives.