Hacker News Reader

Comment by dpark | Hacker News Reader

> My limited understanding is that ... that new crypto or security code would likely be written in Rust for safety.

Where did you get that impression? The creators of Rust would undoubtedly love that to be the case, but Rust is still essentially in its infancy. To my knowledge there are almost no major projects released that have been built in Rust. It's ranked below such heavy hitters as Ada and Prolog for popularity on the TIOBE index[1]. It's pretty unlikely that Rust will become the standard language for everything crypo- or security-related anytime soon (or ever, but it could happen).

[1] https://www.tiobe.com/tiobe-index/

View on HN

> there are almost no major projects released that have been built in Rust.

https://news.ycombinator.com/item?id=18545373

This includes Microsoft, which I forgot in that post, who uses it in production for their IOT product, and as part of Visual Studio Code.

That said, for crypto, there are some less than ideal things. That’s not stopping projects from working on it.

Where is rust used in Code?

Rust isn't directly used in VSCode. VSCode makes use of ripgrep (a Rust-based replacement for grep), though.

Okay that’s what I thought. So that’s not really Microsoft “using Rust in production code” so much as one guy (I know him; he likes coconut la croix; I do too) deciding ripgrep would be a good basis for implementing the FileSearchProvider api.

The Code situation is the least strong; see the other sibling threads for more.

To be clear, I did not claim no one was using it. "Almost no major projects" implies there there are a few major projects. It's a small set of projects, though, especially in comparison with something like C++.

Yep, that’s very much true. It’s been on a big upward trajectory lately. But that’s easy when you’re starting small :)

> That’s not stopping projects from working on it.

To support that...

Grin contains a phenomenal amount of cryptography: https://github.com/mimblewimble/grin

Bulletproofs implementation in rust (small proof sizes): https://github.com/dalek-cryptography/bulletproofs

...with tons of really well done cryptography by that group (dalek): https://github.com/dalek-cryptography

Pairing based crypto library used in the second largest distribution of Ethereum (and maybe zcash?): https://github.com/paritytech/bn

These libraries have prompted me to start learning rust (albeit slowly as I'm using Go and C at work).

Microsoft might experiment with non-mainstream stuff, but in practice, most of the code in the company is still written in C++, C#, and lately, TypeScript. Much like other large corps, it has a lot of people proficient in certain technologies, and going for something exotic is rarely justifiable purely from the perspective of being able to maintain a team for such a project long-term.

Sure. I certainly don’t mean to imply Microsoft is now built on Rust.

But it is a big place, and some places do get to experiment.

PHP ranks above Swift on Toibe, I should probably use that for writing iOS applications then.

Edit: I guess to make the point crystal clear since there's downvotes, "search engine popularity" is not equivalent to "appropriate tool for the job". Tiobe could equally be viewed as "which languages are hardest to use" or "which languages attract the most newcomers" both of which screw with search engine query rankings.

Not sure how your edit makes your point more clear. The intro explains how it's calculated and how you could use the data that tiobe provides. Personally I wouldn't worry too much about such lists, use it as inspiration to find new technologies. The more languages you know the easier it is to switch when the world around you changes.

The downvotes are likely for the fact that no one made your strawman claim. “Rust isn’t very popular” is not a statement of its suitability for any particular purpose. It’s a response to the idea that somehow it would have already displaced C/C++ for all security-sensitive work.

Reply on news.ycombinator.com