Daniel Julius Bernstein (sometimes known simply as djb; born October 29, 1971) is a professor at the University of Illinois at Chicago, a mathematician, a cryptologist, and a programmer. Bernstein is the author of the computer software qmail and djbdns, and is a proponent of license-free software. October 29 is the 302nd day of the year (303rd in leap years) in the Gregorian Calendar, with 63 days remaining. ... 1971 (MCMLXXI) was a common year starting on Friday (the link is to a full 1971 calendar). ... A professor (Latin: one who claims publicly to be an expert) (or prof for short) is a senior teacher, lecturer and/or researcher usually employed by a college or university. ... The University of Illinois at Chicago (UIC) is a public, state-supported research university. ... A mathematician is a person whose primary area of study and research is mathematics. ... Pre-19th century Leone Battista Alberti, polymath/universal genius, inventor of polyalphabetic substitution (see frequency analysis for the significance of this -- missed by most for a long time and dumbed down in the Vigenère cipher), and what may have been the first mechanical encryption aid. ... A programmer or software developer is someone who programs computers, i. ... qmail is a mail transfer agent that runs on Unix. ... djbdns is a simple and secure DNS implementation created by Daniel J. Bernstein because he was fed up with repeated BIND security holes. ... Licence-free software is software that is copyrighted but which is not accompanied by a software licence. ...

Bernstein brought the court case Bernstein v. United States. As a result of the ruling in that case, software was declared protected speech under the First Amendment and national restrictions on encryption software were overturned. Bernstein was originally represented by the EFF. During later phases of the suit, Bernstein represented himself in court despite having no formal training as a lawyer. Bernstein v. ... The first ten Amendments to the U.S. Constitution make up the Bill of Rights. ... In cryptography, encryption is the process of obscuring information to make it unreadable without special knowledge. ... The EFF uses the blue ribbon as symbolism for their Free Speech defense. ...

Bernstein has also proposed Internet Mail 2000, an alternative system for electronic mail, intended to replace SMTP, POP3 and IMAP. Internet Mail 2000 is a new Internet mail architecture proposed by Daniel J. Bernstein (and in subsequent years separately proposed by several others), designed with the precept that the initial storage of mail messages be the responsibility of the sender, and not of the recipient as it is with the... Simple Mail Transfer Protocol (SMTP) is the de facto standard for e-mail transmission across the Internet. ... In computing, local e-mail clients use the Post Office Protocol version 3 (POP3), an application-layer Internet standard protocol, to retrieve e-mail from a remote server over a TCP/IP connection. ... The Internet Message Access Protocol (commonly known as IMAP4, and previously called Internet Mail Access Protocol) is an application layer Internet protocol that allows a local client to access e-mail on a remote server. ...

Software security

In the autumn of 2004, Bernstein began teaching one of the first formal university-level courses about computer software security, titled "UNIX Security Holes". The 16 members of the class discovered 91 new UNIX security holes. Bernstein, long a promoter of the idea that full disclosure is the best method to promote software security and founder of the securesoftware mailing list, publicly announced 44 of them with sample exploit code. This received some press attention and rekindled a debate over full disclosure. It has been designated the: International Year of Rice (by the United Nations) International Year to Commemorate the Struggle against Slavery and its Abolition (by UNESCO) 2004 World Health Day topic was Road Safety (by World Health Organization) Year of the Monkey (by the Chinese calendar) See the world in... Wikibooks has more about this subject: Guide to Unix Unix or UNIX is a computer operating system originally developed in the 1960s and 1970s by a group of AT&T Bell Labs employees including Ken Thompson, Dennis Ritchie, and Douglas McIlroy. ... Full Disclosure is an Thriller with the Megastar Fred Ward. ... Full Disclosure is an Thriller with the Megastar Fred Ward. ...

Few — if any — security holes have been found in Bernstein's own software, qmail and djbdns, despite their widespread use and a US$5000 reward for qmail and a US$500 reward for djbdns. Some security professionals believe that one qmail bug (an integer overflow) does qualify as a security hole, because it could lead to remote root compromise when qmail is installed on certain rare 64-bit systems^{[citation needed]}. Indeed, Bernstein pointed out several of these kinds of integer overflow bugs during class lectures^{[citation needed]}. In computer programming, an integer overflow is an anomalous condition which may cause a buffer overflow, resulting in a computer security risk where adjacent, valid program control data may be overwritten, permitting the execution of arbitrary, and potentially harmful code. ...

Bernstein believes it is possible to write secure software if the programmer is sufficiently dedicated. Thus believing that the widespread prevalence of security holes results from programmer laziness and incompetence, Bernstein argues:

Immediate full disclosure, with a working exploit punishes the programmer for his bad code. He panics; he has to rush to fix the problem; he loses users.

You're whining that punishment is painful. You're ignoring the effect that punishment has on future behavior. It encourages programmers to invest the time and effort necessary to eliminate security problems. ³

Bernstein has recently explained that he is pursuing a strategy to "produce invulnerable computer systems". Bernstein plans to achieve this by putting the vast majority of computer software into an "extreme sandbox" that prevents it from doing anything besides transforming input into output and by writing bugfree replacements (like qmail and djbdns) for the remaining components that need additional privileges. He concludes: "I won’t be satisfied until I've put the entire security industry out of work." ⁴

As of Spring 2005, Bernstein was teaching a course on "High Speed Cryptography"⁵. Bernstein demonstrated new results against AES in the same time period.⁶ 2005 is a common year starting on Saturday of the Gregorian calendar. ... General Designer(s) Vincent Rijmen and Joan Daemen First published 1998 Derived from Square (cipher) Cipher(s) based on this design Crypton (cypher), Anubis (cipher), GRAND CRU Algorithm detail Block size(s) 128 bits note Key size(s) 128, 192 or 256 bits note Structure Substitution-permutation network Number of...

Software licensing

Bernstein was a contributor of source code to the OpenBSD project for a period of time leading up to an unrelated systematic licence audit of the OpenBSD ports and source trees in June 2001.^[1] Code in more than a hundred files throughout the system was found to be unlicensed, ambiguously licensed or in use against the terms of the licence. Among other contributions, all software produced by Daniel J. Bernstein was removed from the OpenBSD ports tree. At the time, Bernstein requested that all modified versions of his code be approved by him prior to redistribution, a requirement to which OpenBSD developers were not willing to devote time and effort to.^[2] The removal led to a clash with Bernstein, who felt it to be uncalled for, citing the Netscape web browser as much less free and accused developers of hypocrisy for permitting it to remain while removing his software.^[3] The OpenBSD project's stance was that Netscape, although not open source, had licence conditions that were much easier to meet;^[4] they asserted that Bernstein's demand for control of derivatives would lead to a great deal of additional work and that removal was the most appropriate way to comply with his requirements. As of November 2005, after the release of OpenBSD 3.8, Daniel J. Bernstein's software was still absent from the ports tree. OpenBSD is a freely available Unix-like computer operating system descended from Berkeley Software Distribution (BSD), a Unix derivative created by the University of California, Berkeley. ... Netscape is the general name for a series of web browsers originally produced by Netscape Communications Corporation, but now developed by AOL. The original browser was once the dominant browser in terms of usage share, but it now has only a relatively small number of users. ... It has been suggested that Comparison of web browsers be merged into this article or section. ...

Mathematics

Bernstein is a prolific publisher of papers in mathematics and computation. Many of his papers introduce advances in the state of the art for algorithms or implementations. However, he's also a meticulous chronicler of previous advances, for instance his brief but encyclopaedic "Multidigit multiplication for mathematicians" ⁷. Euclid, detail from The School of Athens by Raphael. ... Flowcharts are often used to represent algorithms. ...

Bernstein in 2001 published "Circuits for integer factorization: a proposal."⁸, which caused a stir as it potentially suggested that if physical hardware implementations could be close to their theoretical efficiency, then perhaps current views about how large numbers have to be before they are impractical to factor might be out by a factor of three. Thus as 512-digit RSA was then breakable, then perhaps 1536-bit RSA would be too. Bernstein was careful not to make any actual predictions, and emphasised the importance of how to interpret asymptotic expressions. However several other important names in the field, Arjen Lenstra, Adi Shamir, Jim Tomlinson, and Eran Tromer disagreed strongly with Bernstein's conclusions ⁹. Bernstein has received funding to investigate whether the potential can be realized. In cryptography, RSA is an algorithm for public-key encryption. ... In mathematics and applications, particularly the analysis of algorithms, asymptotic analysis is a method of classifying limiting behaviour, by concentrating on some trend. ... Adi Shamir at the CRYPTO 2003 conference. ...

Bernstein is also the author of the mathematical libraries DJBFFT, a fast portable FFT library, and of primegen, an asymptotically fast small prime sieve with low memory footprint based on the Atkins sieve rather than the more usual sieve of Eratosthenes. Both have been used effectively to aid the search for large prime numbers. Illustration of an application which may use libvorbisfile. ... A fast Fourier transform (FFT) is an efficient algorithm to compute the discrete Fourier transform (DFT) and its inverse. ... Sieve theory is a set of general techniques in number theory, designed to count, or more realistically to estimate the size of, sifted sets of integers. ... This article needs to be cleaned up to conform to a higher standard of quality. ... In mathematics, the Sieve of Eratosthenes is a simple, ancient algorithm for finding all prime numbers up to a specified integer. ... In mathematics, a prime number, or prime for short, is a natural number greater than one and whose only distinct positive divisors are 1 and itself. ...

Bernstein is a controversial figure. On Usenet and his website, he has criticized those whose views differ from his own. Notable Bernstein controversies have involved Wietse Venema and Paul Vixie regarding software and security; Matteo Frigo, author of FFTW, regarding FFT implementation and benchmarking; and Bruce Schneier and Arjen Lenstra regarding computational cost. Usenet is a distributed Internet discussion system that evolved from a general purpose UUCP network of the same name. ... Wietse Venema speaking at a conference in 2004 Dr. Wietse Zweitze Venema (born 1951) is a Dutch programmer and physicist best known for writing the Postfix mail system. ... Paul Vixie is the author of several RFCs and well known UNIX system programs, among them SENDS, proxynet, rtty and Vixie cron. ... FFTW, for Fastest Fourier Transform in the West, is a software library for computing discrete Fourier transforms (DFTs), developed by Matteo Frigo and Steven G. Johnson at the MIT Laboratory for Computer Science. ... In computing, a benchmark is the result of running a computer program, or a set of programs, in order to assess the relative performance of an object, by running a number of standard tests and trials against it. ... Bruce Schneier Bruce Schneier (born January 15, 1963) is an American cryptographer, computer security specialist, and writer. ...

References

1. Georgi Guninski. Georgi Guninski security advisory #74, 2005. URL accessed on September 23, 2005.
2. qmail pop3d remote root exploit (64 BIT ONLY). Handler's Diary. URL accessed on September 23, 2005.
3. Daniel J. Bernstein (2001-04-09). "It's becoming obvious that...". comp.security.unix. (Google Groups)
4. Daniel J. Bernstein (2005-01-07). "Selected Research Activities"
5. Daniel J. Bernstein. MCS 590, High-Speed Cryptography, Spring 2005. Authenticators and signatures. URL accessed on September 23, 2005.
6. Daniel J. Bernstein (2004-04-17). "Cache timing attacks on AES." cd9faae9bd5308c440df50fc26a517b4.
7. Daniel J. Bernstein (2001-08-11). "Multidigit multiplication for mathematicians"
8. Daniel J. Bernstein (2001-11-09). "Circuits for integer factorization: a proposal"
9. Arjen K. Lenstra, Adi Shamir, Jim Tomlinson, and Eran Tromer (2002). "Analysis of Bernstein's Factorization Circuit". proc. Asiacrypt LNCS 2501: 1–26.

1. ↑ NewsForge. OpenBSD and ipfilter still fighting over license disagreement, June 06, 2001. Visited November 23, 2005.
2. ↑ de Raadt, Theo. Mail to openbsd-misc: Re: Why were all DJB's ports removed? No more qmail?, August 24, 2001. Visited December 9, 2005.
3. ↑ Bernstein, DJ. Mail to openbsd-misc: Re: Why were all DJB's ports removed? No more qmail?, August 27, 2001. Visited December 9, 2005.
4. ↑ Espie, Marc. Mail to openbsd-misc: Re: Why were all DJB's ports removed? No more qmail?, August 28, 2001. Visited December 9, 2005.

September 23 is the 266th day of the year (267th in leap years). ... 2005 (MMV) was a common year starting on Saturday of the Gregorian calendar. ... September 23 is the 266th day of the year (267th in leap years). ... 2005 (MMV) was a common year starting on Saturday of the Gregorian calendar. ... 2001: A Space Odyssey. ... April 9 is the 99th day of the year in the Gregorian calendar (100th in leap years). ... 2005 (MMV) was a common year starting on Saturday of the Gregorian calendar. ... January 7 is the seventh day of the year in the Gregorian calendar. ... September 23 is the 266th day of the year (267th in leap years). ... 2005 (MMV) was a common year starting on Saturday of the Gregorian calendar. ... It has been designated the: International Year of Rice (by the United Nations) International Year to Commemorate the Struggle against Slavery and its Abolition (by UNESCO) 2004 World Health Day topic was Road Safety (by World Health Organization) Year of the Monkey (by the Chinese calendar) See the world in... April 17 is the 107th day of the year in the Gregorian calendar (108th in leap years). ... 2001: A Space Odyssey. ... August 11 is the 223rd day of the year (224th in leap years) in the Gregorian Calendar. ... 2001: A Space Odyssey. ... November 9 is the 313th day of the year (314th in leap years) in the Gregorian Calendar, with 52 days remaining. ...

Further reading

• Daniel J. Bernstein. MCS 494: UNIX Security Holes. Unix. URL accessed on September 23, 2005.
• Lemos, Robert, "Students uncover dozens of Unix software flaws", News.com, 2004-12-15.
• "DJB Announces 44 Security Holes In *nix Software", Slashdot, 2004-12-15.

Wikibooks has more about this subject: Guide to Unix Unix or UNIX is a computer operating system originally developed in the 1960s and 1970s by a group of AT&T Bell Labs employees including Ken Thompson, Dennis Ritchie, and Douglas McIlroy. ... September 23 is the 266th day of the year (267th in leap years). ... 2005 (MMV) was a common year starting on Saturday of the Gregorian calendar. ... It has been designated the: International Year of Rice (by the United Nations) International Year to Commemorate the Struggle against Slavery and its Abolition (by UNESCO) 2004 World Health Day topic was Road Safety (by World Health Organization) Year of the Monkey (by the Chinese calendar) See the world in... December 15 is the 349th day of the year (350th in leap years) in the Gregorian calendar. ... It has been designated the: International Year of Rice (by the United Nations) International Year to Commemorate the Struggle against Slavery and its Abolition (by UNESCO) 2004 World Health Day topic was Road Safety (by World Health Organization) Year of the Monkey (by the Chinese calendar) See the world in... December 15 is the 349th day of the year (350th in leap years) in the Gregorian calendar. ...

External links

Wikiquote has a collection of quotations related to:

Daniel J. Bernstein

• Official website
• The DJB Way
• DJBFFT