| ...  Further, getting two  
 | computers to generate the exact same binary code from the exact same  
 | source code is a surprisingly difficult challenge.  It requires a  
 | perfect match of everything from compiler versions to C library  
 | versions right down to identical *clocks* -- because often, compilers  
 | will incorporate timestamps into the output.
 | 
 | Doing checksum validation of source code is feasible.  Of binary code,  
 | not really.


Well said.  Two binaries can be execution identical except for their
use of registers -- their use of registers being an artefact of the
compiler.

--dan


_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to