4 ms·
For more, including information about the "Diverse Double-Compiling" (DDC) countermeasure, see my page: https://dwheeler.com/trusting-trust/ https://dwheeler.co
by dwheeler 3y ago
For more, including information about the "Diverse Double-Compiling" (DDC) countermeasure, see my page:
https://dwheeler.com/trusting-trust/ https://dwheeler.com/trusting-trust/
- legobmw99 3y agoQuestion from reading the abstract: how does one acquire this “second (trusted) compiler” when you are genuinely suspicious you are facing an adversary using an attack like this one?
- dwheeler 3y agoThe second compiler can be subverted, as long as it's not subverted the same way. In particular, it could be one you wrote yourself. It doesn't need to support everything, just enough to compile the compiler under test. It could also be a compiler from a different group/organization. You could use many compilers and test with all them.