Tag Info

New answers tagged

2

Generally, if you aren't sure you trust someone else's compilation, you would make the effort to do your own, or find someone to obtain it from whom you do trust. But are you sure you can trust that your compiler hasn't been infected? It's turtles all the way down. At some point you will always wind up having to make a judgement call and/or rely on ...


3

Even with the same sources, the same OS, the same libraries, the same compiler and the same loader, two binaries won't match since they include information about date of compile and load operation. On the exact same system and development environment, if you build twice the same binary it will be different and hence any hash will differ: $ md5 nmap MD5 ...


15

If you compile the code yourself, then you may obtain the same binary. Or not. Basically, your chances are good if the compiler uses deterministic optimization algorithms (that's the usual case) and you use the exact same compiler version with the same command-line options (that's usually much harder to ensure). Deterministic re-compilation is easier with ...


10

Yes it is possible. But it is very hard, as the whole compilation process hasn't been designed for that goal. It is often called "deterministic builds", "reproducible builds", "idempotent builds" and is a challenge. Bitcoin, Tor, and Debian, are attempting to use deterministic builds, and the technical process is described here. Admittedly the process is ...


23

It's not that simple. With the huge number of platforms on which the program could have been built, it can be extremely difficult to replicate the original build environment. Because of this, you could be using a different compiler, with different settings, using different versions of libraries. These slight variations in the environment can definitely ...



Top 50 recent answers are included