6 ms·
Reproducible builds are not required to evaluate the encryption algorithm used in Telegram. Software auditors use deployed binaries as a matter of course. The
by kasey_junk 2y ago
Reproducible builds are not required to evaluate the encryption algorithm used in Telegram.
Software auditors use deployed binaries as a matter of course.
They’d do so even if reproducible builds are on offer because the code and the binary aren’t promised to be the same even with reproducible builds and validating that they are can be more problematic than the normal case of auditing binaries.
- EGreg 2y agoCan you show me any audits of Telegram binaries or similar software?
- kasey_junk 2y agohttps://www.sciencedirect.com/science/article/abs/pii/S2666281722000166?via%3Dihub https://www.sciencedirect.com/science/article/abs/pii/S26662...