[tor-talk] BitMail.sf.net v 0.6 - Secure Encrypting Email Client

[dan at geer.org]

 | ...  Further, getting two  
 | computers to generate the exact same binary code from the exact same  
 | source code is a surprisingly difficult challenge.  It requires a  
 | perfect match of everything from compiler versions to C library  
 | versions right down to identical *clocks* -- because often, compilers  
 | will incorporate timestamps into the output.
 | 
 | Doing checksum validation of source code is feasible.  Of binary code,  
 | not really.


Well said.  Two binaries can be execution identical except for their
use of registers -- their use of registers being an artefact of the
compiler.

--dan