11 ms·
> My limited understanding is that ... that new crypto or security code would likely be written in Rust for safety. Where did you get that impression? The cre
by dpark 8y ago
> My limited understanding is that ... that new crypto or security code would likely be written in Rust for safety.
Where did you get that impression? The creators of Rust would undoubtedly love that to be the case, but Rust is still essentially in its infancy. To my knowledge there are almost no major projects released that have been built in Rust. It's ranked below such heavy hitters as Ada and Prolog for popularity on the TIOBE index[1]. It's pretty unlikely that Rust will become the standard language for everything crypo- or security-related anytime soon (or ever, but it could happen).
[1] https://www.tiobe.com/tiobe-index/ https://www.tiobe.com/tiobe-index/
- steveklabnik 8y ago> there are almost no major projects released that have been built in Rust. https://news.ycombinator.com/item?id=18545373 https://news.ycombinator.com/item?id=18545373 This includes Microsoft, which I forgot in that post, who uses it in production for their IOT product, and as part of Visual Studio Code. That said, for crypto, there are some less than ideal things. That’s not stopping projects from working on it.
- jakear 8y agoWhere is rust used in Code?
- sasmithjr 8y agoRust isn't directly used in VSCode. VSCode makes use of ripgrep (a Rust-based replacement for grep), though.
- jakear 8y agoOkay that’s what I thought. So that’s not really Microsoft “using Rust in production code” so much as one guy (I know him; he likes coconut la croix; I do too) deciding ripgrep would be a good basis for implementing the FileSearchProvider api.
- steveklabnik 8y agoThe Code situation is the least strong; see the other sibling threads for more.
- dpark 8y agoTo be clear, I did not claim no one was using it. "Almost no major projects" implies there there are a few major projects. It's a small set of projects, though, especially in comparison with something like C++.
- steveklabnik 8y agoYep, that’s very much true. It’s been on a big upward trajectory lately. But that’s easy when you’re starting small :)
- rargulati 8y ago> That’s not stopping projects from working on it. To support that... Grin contains a phenomenal amount of cryptography: https://github.com/mimblewimble/grin https://github.com/mimblewimble/grin Bulletproofs implementation in rust (small proof sizes): https://github.com/dalek-cryptography/bulletproofs https://github.com/dalek-cryptography/bulletproofs ...with tons of really well done cryptography by that group (dalek): https://github.com/dalek-cryptography https://github.com/dalek-cryptography Pairing based crypto library used in the second largest distribution of Ethereum (and maybe zcash?): https://github.com/paritytech/bn https://github.com/paritytech/bn These libraries have prompted me to start learning rust (albeit slowly as I'm using Go and C at work).
- int_19h 8y agoMicrosoft might experiment with non-mainstream stuff, but in practice, most of the code in the company is still written in C++, C#, and lately, TypeScript. Much like other large corps, it has a lot of people proficient in certain technologies, and going for something exotic is rarely justifiable purely from the perspective of being able to maintain a team for such a project long-term.
- steveklabnik 8y agoSure. I certainly don’t mean to imply Microsoft is now built on Rust. But it is a big place, and some places do get to experiment.
- evilduck 8y agoPHP ranks above Swift on Toibe, I should probably use that for writing iOS applications then. Edit: I guess to make the point crystal clear since there's downvotes, "search engine popularity" is not equivalent to "appropriate tool for the job". Tiobe could equally be viewed as "which languages are hardest to use" or "which languages attract the most newcomers" both of which screw with search engine query rankings.
- jontro 8y agoNot sure how your edit makes your point more clear. The intro explains how it's calculated and how you could use the data that tiobe provides. Personally I wouldn't worry too much about such lists, use it as inspiration to find new technologies. The more languages you know the easier it is to switch when the world around you changes.
- dpark 8y agoThe downvotes are likely for the fact that no one made your strawman claim. “Rust isn’t very popular” is not a statement of its suitability for any particular purpose. It’s a response to the idea that somehow it would have already displaced C/C++ for all security-sensitive work.