3 ms·
> a second (trusted) compiler but… can we assume that any compiler is trusted?
by floatboth 10y ago
> a second (trusted) compiler
but… can we assume that any compiler is trusted?
- nickpsecurity 10y agoWe can't. It's why we need verifiable builds. C0, CompCert, KCC, and Simpl all have strong evidence of their ability to produce correct code from good C or specs of it. Checking that on local tooling plus an assembly build of it would be a start. It can build other things. Or you can use the incremental approach I describe elsewhere in this thread.