No. The discussion is about compiler bugs. The attack “your” solution does not apply against is if the compiler actually has a bug. Compiler have bugs, and som

No. The discussion is about compiler bugs. The attack “your” solution does not apply against is if the compiler actually has a bug. Compiler have bugs, and some of these bugs cause them to silently emit the wrong assembly code for the source program passed to them. One of the authors of the original article that inspired bcrypt's blog post reported hundreds of bugs in Clang and GCC, of which about half are “wrong code” bugs: https://github.com/csmith-project/csmith/blob/master/BUGS_REPORTED.TXT https://github.com/csmith-project/csmith/blob/master/BUGS_RE... You are right that Debian and other distributions assume that compilers do not have “wrong code” bugs, though. The only problem is that this is not true.