Daniel J. Bernstein

Background and Education

Daniel Julius Bernstein was born on October 29, 1971, in East Patchogue, New York. He showed early academic aptitude, ranking fifth in the 1987 Westinghouse Science Talent Search and competing on Princeton University's second-place team at the William Lowell Putnam Mathematical Competition in 1988. He earned a B.A. in mathematics from New York University in 1991 and a Ph.D. in mathematics from the University of California, Berkeley in 1995, studying under Hendrik Lenstra. He later became a professor of computer science at the University of Illinois Chicago, while also holding visiting research and teaching positions at Eindhoven University of Technology in the Netherlands and Ruhr University Bochum in Germany.

Bernstein v. United States

While a Ph.D. student at Berkeley in the early 1990s, Bernstein developed an encryption algorithm called Snuffle and wished to publish its source code and an accompanying academic paper. Under the International Traffic in Arms Regulations then in force, cryptographic software was classified as a munition, meaning Bernstein would have needed to register as an arms dealer and obtain a government export license before publishing his work, even as an academic paper. With the support of the Electronic Frontier Foundation, Bernstein sued the U.S. government, arguing that requiring pre-approval to publish source code violated his First Amendment rights. The case, filed in 1995, proceeded through the U.S. District Court for the Northern District of California and then the Ninth Circuit Court of Appeals. In a decision issued May 6, 1999, a Ninth Circuit panel held that source code is expressive speech protected under the First Amendment, and that the export control regulations functioned as an unconstitutional prior restraint. The government subsequently revised its cryptography export regulations, and the case was ultimately dismissed in 2003 after further rule changes rendered it moot.

Security Software

In the mid-to-late 1990s, Bernstein wrote several widely used pieces of Unix server software designed with an emphasis on minimizing security vulnerabilities, including the qmail mail transfer agent, the djbdns DNS server, and the publicfile file-serving daemon. He publicly offered cash rewards to anyone who could demonstrate a security flaw in this software, a practice that was unusual at the time and is regarded as an early precursor to modern bug bounty programs. In 2009, for example, he paid a reward to a researcher who identified a flaw in djbdns. He also authored smaller but widely reused utilities such as the cdb constant database library and the djb2 string hash function.

Cryptographic Design Work

From the mid-2000s onward, Bernstein became a prominent designer of practical cryptographic primitives. In 2005 he proposed Curve25519, an elliptic curve for Diffie-Hellman key exchange chosen for both high performance and resistance to a range of implementation pitfalls; it later became one of the most widely deployed elliptic curves, used in protocols and products including OpenSSH, Signal, WireGuard, Tor, and Apple's iOS. He designed the Salsa20 stream cipher, which was selected for the eSTREAM portfolio of recommended ciphers in 2008, and its variant ChaCha20, which together with the Poly1305 message authentication code (co-designed by Bernstein) is now used in TLS and other widely deployed security protocols. With collaborators he also produced the Ed25519 digital signature scheme and, in 2005, described cache-timing side-channel attacks against common AES software implementations. Bernstein was part of the core team, alongside Tanja Lange and Peter Schwabe, that created the NaCl (Networking and Cryptography Library) cryptographic library; libsodium, a widely used portable fork of NaCl, is derived from this work.

Standards, Post-Quantum Work, and Advocacy

Bernstein has been an outspoken critic of opaque or government-influenced cryptographic standardization processes, particularly following revelations about NSA influence over NIST elliptic-curve standards. He co-founded the SafeCurves project to evaluate elliptic curves against a broader set of security criteria than official standards required. He has also worked extensively on post-quantum cryptography, co-authoring the SPHINCS stateless hash-based signature scheme in 2015; a successor, SPHINCS+, was selected in 2022 as one of the algorithms in the NIST Post-Quantum Cryptography Standardization project, the only hash-based signature scheme among the winners. In 2022, Bernstein filed a Freedom of Information Act lawsuit seeking records concerning the NSA's involvement in NIST's post-quantum cryptography standardization process.

Significance and Legacy

Bernstein v. United States is regarded as a foundational case establishing that computer source code can constitute protected speech, a principle that has been invoked in later legal disputes over compelled software modification and encryption policy. His cryptographic algorithms, released without patent encumbrances and designed for straightforward, misuse-resistant implementation, achieved broad real-world adoption across widely used security software. Combined with his early public bug-bounty practices for qmail and djbdns, Bernstein's career spans several distinct but related threads in the history of computer security: the legal status of cryptographic code as speech, the practical design of exploit-resistant server software, and the engineering of cryptographic primitives now embedded in much of the internet's security infrastructure.

Timeline

• 1971-10-29Born in East Patchogue, New York.
• 1991Earns a B.A. in mathematics from New York University.
• 1995Earns a Ph.D. in mathematics from the University of California, Berkeley, and files suit against the U.S. government over cryptography export restrictions.
• 1996-04-15U.S. District Court for the Northern District of California issues its first ruling in Bernstein's case.
• 1999-05-06Ninth Circuit Court of Appeals panel rules that software source code is protected speech under the First Amendment.
• 2003-10-15Bernstein v. United States is dismissed after the government further revises its encryption export regulations.
• 2005Proposes the Curve25519 elliptic curve and demonstrates cache-timing attacks against AES implementations; designs the Salsa20 stream cipher.
• 2008Salsa20 is selected for the eSTREAM final portfolio; Bernstein publishes the ChaCha20 cipher variant.
• 2011Co-creates the NaCl (Networking and Cryptography Library) cryptographic library.
• 2015-02Co-authors the SPHINCS stateless hash-based signature scheme.
• 2022-07SPHINCS+, a successor to SPHINCS co-designed with Bernstein's collaborators, is selected as a winning algorithm in NIST's Post-Quantum Cryptography Standardization project.
• 2022Files a FOIA lawsuit seeking records on NSA involvement in NIST's post-quantum cryptography standards process.