HN Hall of Fame Weekly email

BearSSL – Smaller SSL/TLS

bearssl.org Software & code Software projects Security & privacy Class of 2022-10 Hall of Fame
Screenshot of bearssl.org captured 2026-07-20
Page preview · captured 2026-07-20

Resurfaced independently across 4 calendar years, with breakout response in 2 of them.

submissions
6
submitters
6
observed span
2016–2025
peak thread · 195 comments
338 pts
latest 20+ return · 2022-10-29
143 pts

Submission timeline

2007–2026

One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.

First comments on top threads

HN comment order

The last thing the world needs is another immature SSL/TLS implementation however this makes it very interesting: > No dynamic allocation whatsoever. There is not a single malloc() call in all the library. In fact, the whole of BearSSL requires only memcpy(), memmove(), memcmp() and strlen() from the underlying C library. This makes it utterly portable even in the most special, OS-less situations. (On “big” systems, BearSSL will automatically use a couple more system calls to access the OS-provided clock…

mythz·338-point thread·

No dynamic allocation whatsoever I think this alone is an excellent reason to study the code, but only after you've already had a mental exercise of considering how you could write such an implementation without any dynamic allocation. One of the things that I've noticed in a lot of codebases is superfluous dynamic allocation, which can often be eliminated to make things simpler, more efficient, and removes a possible error-path.

Recent discussion: https://news.ycombinator.com/item?id=12863699

sctb·8-point thread·

It seems to be largely unmaintained/some would say "finished"?

The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.

Breakout years
2

100+ points or 50+ comments

Total points
494

reference only — not used in Hall rules or ranking

Total comments
263

reference only — not used in Hall rules or ranking

Every submission

DateTitle as submittedByPointsComments
2016-11-03BearSSL – Smaller SSL/TLSFirst breakout · Best threadayrx338195
2016-11-04BearSSL - an implementation of the SSL/TLS protocol written in Cmirceasoaica10
2017-01-08BearSSL – A smaller SSL/TLS librarymaxt81
2022-06-11BearSSLrdpintqogeogsaa21
2022-10-29BearSSL: A smaller SSL/TLS libraryHall induction · Latest 20+ point returnsnvzz14363
2025-04-16BearSSLblahaj23