Two File Descriptors for Sockets

Double encryption: Analyzing the NSA/GCHQ arguments against hybrids

Another way to botch the security analysis of Kyber-512

Reducing "gate" counts for Kyber-512 contradicting NIST's calculation

Debunking NIST's calculation of the Kyber-512 security level

Boring Crypto (2015) [pdf]

How to Write Software with Zero bugs – 25 years after qmail 1.0 – D. Bernstein [pdf]

The IPv6 mess (2002)

Turbo Boost

Is D.J. Bernstein our world's most brilliant living programmer?

Librandombytes – a public domain library for generating randomness

Libcpucycles is a public-domain microlibrary for counting CPU cycles

Multi-ciphertext security degradation for lattices

Libsecded

NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

Timing Attacks

Internet Mail 2000

Plagiarism as a patent amplifier: Understanding the delayed rollout of PQC

The IPv6 Mess (2002)

Measuring "efficiency" in document prepration: Microsoft Word vs. LaTex

A discretization attack – Daniel J. Bernstein

An introduction to vectorization (2019)

BADA55 Crypto

PowerPC Compiler Writer's Guide (1996)

Why EdDSA held up better than ECDSA against Minerva

MinimaLT: Minimal-Latency Networking Through Better Security (2013)

Fast constant-time GCD algorithm and modular inversion

Does open-source cryptographic software work correctly?

An Introduction to Vectorization

Rebuilding target files when source files have changed

More →