5 ms·
Oh, I see, generate two different binaries of the same compiler with different compilers, and you know something is up if the same source compiled by those two
by jackowayed 13y ago
Oh, I see, generate two different binaries of the same compiler with different compilers, and you know something is up if the same source compiled by those two separate binaries of the same compiler differ. Assuming the compiler is deterministic, that should work pretty well.
I wonder how well that would work in practice. There are actually quite a few bugs in C compilers[1], and compilers are complicated enough that I could see them hitting some of them when they are compiled. Has anyone done this before?
1: http://www.stanford.edu/class/cs343/resources/finding-bugs-compilers.pdf http://www.stanford.edu/class/cs343/resources/finding-bugs-c...
- lambda 13y agoYes. David A Wheeler did his PhD thesis on this[1], both with some toy compilers to demonstrate that it did detect a trusting trust attack, and eventually bootstrapping gcc using icc, and was able to get it to compile deterministically and verify that it produced identical binaries. 1: http://www.dwheeler.com/trusting-trust/ http://www.dwheeler.com/trusting-trust/
- deleted 13y ago[deleted]