Daniel J. Bernstein

Daniel J. Bernstein
Daniel Bernstein
Born	October 29, 1971 (1971-10-29) (age 40) East Patchogue, New York[1]
Education	Mathematics
Known for	qmail, djbdns
Title	Professor
Website
http://cr.yp.to/djb.html

"djb" redirects here. "DJB" is also IATA code for Sultan Thaha Airport in Jambi, Indonesia

Daniel Julius Bernstein (sometimes known simply as djb; born October 29, 1971) is a mathematician, cryptologist, programmer, and professor of mathematics at the University of Illinois at Chicago. He is the author of the computer software programs qmail, publicfile, and djbdns.

Early life

Bernstein earned his bachelor's degree in mathematics from New York University (1991) and has a PhD in mathematics from the University of California, Berkeley (1995), where he studied under Hendrik Lenstra. He attended Bellport High School, a public high school on Long Island, and graduated at 15 in 1987.^[2] The same year, he ranked 5th place in the Westinghouse Science Talent Search.^[3] In 1987 (at the age of 16), he achieved a Top 10 ranking in the William Lowell Putnam Mathematical Competition.^[4]

Bernstein v. United States

Bernstein brought the court case Bernstein v. United States. The ruling in the case declared software as protected speech under the First Amendment, and national restrictions on encryption software were overturned. Bernstein was originally represented by the Electronic Frontier Foundation, but later represented himself despite having no formal training as a lawyer.^[5]

He has also proposed Internet Mail 2000, an alternative system for electronic mail, intended to replace Simple Mail Transfer Protocol (SMTP), Post Office Protocol (POP3) and Internet Message Access Protocol (IMAP).^[6]

Software security

In the autumn of 2004, Bernstein taught a course about computer software security, titled "UNIX Security Holes". The sixteen members of the class discovered 91 new UNIX security holes. Bernstein, long a promoter of the idea that full disclosure is the best method to promote software security and founder of the securesoftware mailing list, publicly announced 44 of them with sample exploit code. This received some press attention and rekindled a debate over full disclosure.^{[citation needed]}

Bernstein has recently explained that he is pursuing a strategy to "produce invulnerable computer systems". He plans to achieve this by putting the vast majority of computer software into an "extreme sandbox" that only allows it to transform input into output, and by writing bugfree replacements (like qmail and djbdns) for the remaining components that need additional privileges. He concludes: "I won’t be satisfied until I've put the entire security industry out of work."^[7]

In spring 2005 Bernstein taught a course on "high speed cryptography".^[8] He demonstrated new results against implementations of AES (cache attacks) in the same time period.^[9]

As of April 2008^[update],^[10] djb's stream cipher "Salsa20" was selected as a member of the final portfolio of the eSTREAM project, part of a European Union research directive.

Secure Software

Bernstein has written a number of security-aware programs, including:

• qmail
• djbdns
• ucspi-tcp
• daemontools
• publicfile

Bernstein offers a security guarantee for qmail and djbdns; while some claim there is a dispute over a reported potential qmail exploit, a functioning exploit targeting qmail running on 64-bit platforms has been published.^[11][12] Bernstein claims that the exploit does not fall within the parameters of the qmail security guarantee. In March 2009, Bernstein awarded $1000 to Matthew Dempsky for finding a security hole in djbdns.^[13]

In August 2008, Bernstein announced^[14] DNSCurve, a proposal to secure the Domain Name System. DNSCurve uses techniques from elliptic curve cryptography to give a vast decrease in computational time over the RSA public-key algorithm used by DNSSEC, and uses the existing DNS hierarchy to propagate trust by embedding public keys into specially formatted (but backward-compatible) DNS records.

Mathematics

Bernstein has published a number of papers in mathematics and computation. Many of his papers deal with algorithms or implementations. He also wrote a survey titled "Multidigit multiplication for mathematicians".^[15]

In 2001 Bernstein circulated "Circuits for integer factorization: a proposal,"^[16] which caused a stir as it potentially suggested that if physical hardware implementations could be close to their theoretical efficiency, then perhaps current views about how large numbers have to be before they are impractical to factor might be off by a factor of three. Thus as 512-bit RSA was then breakable, then perhaps 1536-bit RSA would be too. Bernstein was careful not to make any actual predictions, and emphasized the importance of correctly interpreting asymptotic expressions. However, several other important names in the field, Arjen Lenstra, Adi Shamir, Jim Tomlinson, and Eran Tromer disagreed strongly with Bernstein's conclusions.^[17] Bernstein has received funding to investigate whether this potential can be realized.

He is also the author of the mathematical libraries DJBFFT, a fast portable FFT library, and of primegen, an asymptotically fast small prime sieve with low memory footprint based on the sieve of Atkin rather than the more usual sieve of Eratosthenes. Both have been used effectively to aid the search for large prime numbers.

See also

• Salsa20, Poly1305-AES, Snuffle, cryptographic primitives designed by Bernstein.
• CubeHash, Bernstein's submission to the NIST SHA-3 competition.
• Chain loading (which is sometimes known as Bernstein chaining, due to Bernstein's extensive use of this technique)
• Quick Mail Queuing Protocol (QMQP)
• Quick Mail Transport Protocol (QMTP)
• Bernstein v. United States

Notes

1. ^ CV
2. ^ "New Yorkers Excel In Contest". New York Times. 1987-01-21. http://query.nytimes.com/gst/fullpage.html?res=9B0DE1D81E3CF932A15752C0A961948260. Retrieved November 9, 2008. 
3. ^ "TWO GIRLS WIN WESTINGHOUSE COMPETITION". New York Times. 1987-01-21. http://query.nytimes.com/gst/fullpage.html?res=9B0DE4D91239F930A35750C0A961948260. Retrieved March 14, 2011. 
4. ^ L. F. Klosinski; G. L. Alexanderson; L. C. Larson (Oct., 1988). "The William Lowell Putnam Mathematical Competition". The American Mathematical Monthly 95 (8): pp. 717-727. http://www.jstor.org/stable/2322251. 
5. ^ [1]
6. ^ [2]
7. ^ Daniel J. Bernstein (2005-01-07) (PDF). Selected Research Activities. http://cr.yp.to/cv/activities-20050107.pdf. 
8. ^ Daniel J. Bernstein. "MCS 590, High-Speed Cryptography, Spring 2005". Authenticators and signatures. http://cr.yp.to/2005-590.html. Retrieved September 23, 2005. 
9. ^ Daniel J. Bernstein (2004-04-17) (PDF). Cache timing attacks on AES. cd9faae9bd5308c440df50fc26a517b4. http://cr.yp.to/antiforgery/cachetiming-20050414.pdf. 
10. ^ Steve Babbage, Christophe De Canniere, Anne Canteaut, Carlos Cid, Henri Gilbert, Thomas Johansson, Matthew Parker, Bart Preneel, Vincent Rijmen, and Matthew Robshaw. "The eSTREAM Portfolio". http://www.ecrypt.eu.org/stream/portfolio.pdf. Retrieved April 28, 2010. 
11. ^ Georgi Guninski (2005-05-31). "Georgi Guninski security advisory #74, 2005". http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html. Retrieved September 23, 2005. 
12. ^ James Craig Burley (2005-05-31). "My Take on Georgi Guninski's qmail Security Advisories". http://www.jcb-sc.com/qmail/guninski.html. 
13. ^ Daniel J. Bernstein (2009-03-04). "djbdns<=1.05 lets AXFRed subdomains overwrite domains". http://article.gmane.org/gmane.network.djbdns/13864. 
14. ^ Daniel J. Bernstein. "High-speed cryptography". http://marc.info/?l=djbdns&m=122011940521548&w=2. 
15. ^ Daniel J. Bernstein (2001-08-11). Multidigit multiplication for mathematicians. http://cr.yp.to/papers.html#m3. 
16. ^ Daniel J. Bernstein (2001-11-09). Circuits for integer factorization: a proposal. http://cr.yp.to/papers.html#nfscircuit. 
17. ^ Arjen K. Lenstra, Adi Shamir, Jim Tomlinson, and Eran Tromer (2002). "Analysis of Bernstein's Factorization Circuit". proc. Asiacrypt LNCS 2501: 1–26. http://www.wisdom.weizmann.ac.il/~tromer/papers/meshc/meshc.html. 

Further reading

• Daniel J. Bernstein. "MCS 494: UNIX Security Holes". Unix. http://cr.yp.to/2004-494.html. Retrieved September 23, 2005. 
• Lemos, Robert (2004-12-15). "Students uncover dozens of Unix software flaws". News.com. http://news.com.com/Students+uncover+dozens+of+Unix+software+flaws/2100-1002_3-5492969.html. 
• "DJB Announces 44 Security Holes In *nix Software". Slashdot. 2004-12-15. http://it.slashdot.org/article.pl?sid=04/12/15/2113202&tid=172&tid=146&tid=128&tid=130&tid=1&tid=106. 
• Daniel J. Bernstein. "Some thoughts on security after ten years of qmail 1.0" (PDF). http://cr.yp.to/qmail/qmailsec-20071101.pdf. Retrieved December 19, 2007. 
• Daniel J. Bernstein. "DNSCurve: Usable security for DNS". http://dnscurve.org/. Retrieved August 31, 2008. 

External links

• Official website
• DJBFFT
• Daniel Bernstein's Profile at UIC
• Daniel J. Bernstein at the Mathematics Genealogy Project.

Persondata
Name	Bernstein, Daniel J.
Alternative names
Short description	American mathematician and cryptographer
Date of birth	October 29, 1971
Place of birth	East Patchogue, New York
Date of death
Place of death