Skip to content
HomeVideosBooksBlogs
AllTop postsTopics
Podcasts
HistoryListsWatch laterLiked videosFollowing

The videos, books, blogs and podcasts Hacker News keeps recommending, all in one place.

VideosBooksBlogsPodcastsAboutPrivacySettings

Data from Hacker News, HackerTube, HackerBooks, HackerBlogs and Open Library. Credits · Not affiliated with Y Combinator.

HomeVideosBooksBlogsPodcasts
Ctrl K
    D

    D. J. Bernstein

    cr.yp.to · Personal blog · on HN since 2008

    Daniel J. Bernstein's site, with his cryptography and security software, such as qmail and djbdns, and papers and essays on security.

    Visit blogHN submissions
    SecurityProgrammingNetworking
    What HN says

    Commenters praise his code as elegant, low on bugs, and a lesson in writing secure C. His site is also admired for its minimalism.

    Stats for nerds
    641HN people shared it
    184linked in comments
    4.1Kstory points
    Jul 2026last shared
    2009people per year2026

    Top posts on HN

    1. 1
      IEEE Refuses to Accept Public-Domain Papers?
      6 people · 501 points · first shared 2009 · 92 comments on HN
    2. 2
      Making sure crypto remains insecure [pdf]
      3 people · 439 points · first shared 2014 · 171 comments on HN
    3. 3
      Notes by djb on using Fil-C
      3 people · 375 points · first shared 2025 · 246 comments on HN
    4. 4
      Each socket should have two file descriptors
      7 people · 231 points · first shared 2013 · 65 comments on HN
    5. 5
      The death of optimizing compilers [pdf]
      2 people · 217 points · first shared 2015 · 216 comments on HN
    6. 6
      Crit-bit Trees: the best way to store sets
      18 people · 212 points · first shared 2008 · 41 comments on HN
    7. 7
      A plea for lean software (1995) [pdf]
      29 people · 199 points · first shared 2014 · 100 comments on HN
    8. 8
      UTC, Tai, and Unix Time (2001)
      11 people · 169 points · first shared 2012 · 141 comments on HN
    9. 9
      Calculus for mathematicians (1997) [pdf]
      3 people · 108 points · first shared 2014 · 86 comments on HN
    10. 10
      Boring Crypto [pdf]
      6 people · 98 points · first shared 2015 · 24 comments on HN

    What HN people wrote when they linked it

    • cxrSep 2020

      > 2 of them have normal sized text and 1 has [...]

      No, one of them (Wikiwand) has "normal sized text", and the other two have objectively shrunken text. This is not a matter of opinion; this is fact. Both HN and Wikipedia, like I mentioned before, are overriding the text size in their stylesheets to force the main body text to display at a size smaller than the UA preferred size. Wikiwand is using the correct font scaling. If you have a problem with the size of the text on the Wikiwand page, it's because your UA is configured to show text at a size that you have a problem with. It's up to you to deal with that.

      For an example of what properly-sized text looks like, have a look at http://cr.yp.to or http://danluu.com. These sites are not sending any "designer" styles to your browser (aside from the 8 lines of CSS for the latter, which don't affect the text size).

      Besides that, your criticism of Wikiwand's design is dominated by details about its layout and not its text size. But I didn't say Wikiwand was the best layout in the world; it's not, and I don't even use it. But it's still not worse than Wikipedia's overly-designed Vector skin.

    • mesrikNov 2025

      It was the "Great to see _some_ 3letter guy into this" underlined some that.

      It felt bit like s/some/random/g perhaps would apply when reading it. Intentional or not by writer. It made me long and write my comment. There are many 3letter user accounts, which some are more famous than others. To my generation not because they were early users, but great things what they have done. I'm early user too and done things then still quite widely being used with many distributions, but wouldn't compare my achievements to those who became famous and known widely by their account, short or long.

      Anyhow I thought that "djb" ring bell anyone having been around for while. Not just those who have been around early 90 or so when he was held renegade opinions he expressed programming style (qmail, dj dns, etc.), dragged to court of ITAR issues etc.

      But because of his latter work with cryptography and running cr.yp.to site for quite long time.

      https://cr.yp.to/

      I was just wondering, did not intend to start argument fight.

    • johneaApr 2025

      I thought more emphasis should have been given to DJB.

      The article does mention that he created the ChaCha20 algorithm, and that he first characterized the timing side channel attack, but his extremely small, simple and fast source libraries are publicly available.

      They are fully self contained, no dependencies, and small enough to easily include in small-ish embedded systems:

      https://nacl.cr.yp.to/

      Elliptic curve vulnerability to quantum computing is discussed here:

      https://pqcrypto.org/

      DISCLAIMER: I'm not a crypto expert, just an occasional user

      DJB has been at the forefront of advancing crypto for decades, and has a very strong emphasis on simplicity and security. Any article on the subject really should reference his original source pages:

      http://cr.yp.to/

      I've always been a fan of "the DJB way", which is a very simple method of initializing and managing unix type systems. The voidlinux distro roughly follows these principles today.

    • nailerJun 2023

      DJB might be more of an privacy/infosec/Unix thing, so if you're a different type of programmer then fair enough.

      He is famous in crypto (as in cryptography) circles for:

      - Ed25519 for fast + safe asymmetric crypto

      - chacha/poly for fast symmetric crypto

      He is also famous in Unix circles for:

      - qmail

      - djbdns

      - his init system daemontools

      and a bunch of other bits.

      He also fought the US government for your right to use encryption when encryption was considered a munition.

      More at https://en.wikipedia.org/wiki/Daniel_J._Bernstein or https://cr.yp.to

      Jensen is NVIDIA. Left MSI, took on the #1 competitor in the space (3DFX) and dominated them, now supplies the hardware for most of high end gaming and ML, appeared in his kitchen for an announcement once, and announced a little while after that the entire scene was done with high quality physics based rendering and nobody knew.

    • red_admiralSep 2024

      Most of what I've learnt here was less from books and more from colleagues/seminars and reading research papers.

      You can get a brief introduction at https://soatok.blog/2020/04/26/a-furrys-guide-to-digital-signature-algorithms/ (your own choice if you want that open in a tab at work or not, but there's nothing NSFW in the usual sense in there), and then read the details of each scheme in the RFCs. Some of the RFCs even talk about security implications.

      "djb" as he is known in the crypto world has a good paper at https://eprint.iacr.org/2024/1265 , it's 68 pages so "almost a book". He also has a lot of resources on his page https://cr.yp.to . Be aware that he is sometimes ... controversial (not racist or anything, just has strong opinions on FIPS and the NSA and has actually taken the US government to court in the past over this). He's the author of Curve25519.

    • nlyJul 2022

      The DNS "master file"/"zone file" format is a bloody disaster for the same reason, and practically unparseable. Every implementation parses them differently when it comes to parenthesis.

      From the grammar in RFC 1035:

      <domain-name><rr> [<comment>]

      <blank><rr> [<comment>]

      <rr> contents take one of the following forms:

      [<TTL>] [<class>] <type> <RDATA>

      [<class>] [<TTL>] <type> <RDATA>

      All the columns being optional creates the ambiguity between the <class> and <domain-name> columns in the TTL missing/2nd form. In the real world <class> is always "IN". It's even worse since the set of <type>'s is unbounded and the <RDATA> grammar depends on <type>

      I believe this is one reason why tinydns has its own format https://cr.yp.to/djbdns/tinydns-data.html

    Related

    Daniel J. Bernsteinblog.cr.yp.to144 people

    NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

    Daniel J. Bernstein
    Personal · last shared 2026
    jwzjwz.org880 people

    Watch a VC use my name to sell a con

    jwz
    Personal · last shared 2026
    Tanja Langehyperelliptic.org22 people

    Post-Snowden Cryptography

    Tanja Lange
    Personal · last shared 2023
    Phillip Rogawaycs.ucdavis.edu/~rogaway25 people

    Statement of Condemnation of U.S. Mass-Surveillance Programs [pdf]

    Phillip Rogaway
    Personal · last shared 2026
    Dan Kaminskydankaminsky.com52 people

    The cryptographically provable con man

    Dan Kaminsky
    Personal · last shared 2024
    J. Alex Haldermanjhalderm.com44 people

    The Security Impact of HTTPS Interception [pdf]

    J. Alex Halderman
    Personal · last shared 2023
    Stanford CIS Blogcyberlaw.stanford.edu132 people

    The EARN IT act is back, and it’s more dangerous than ever

    Stanford CIS Blog
    Publication · last shared 2026
    freeCodeCampmedium.freecodecamp.org582 people

    A hacker stole $31M of Ether – how it happened, and what it means for Ethereum

    freeCodeCamp
    Publication · last shared 2025