summaryrefslogtreecommitdiff
path: root/tracwiki/AssuredTooChain.trac
diff options
context:
space:
mode:
Diffstat (limited to 'tracwiki/AssuredTooChain.trac')
-rw-r--r--tracwiki/AssuredTooChain.trac14
1 files changed, 14 insertions, 0 deletions
diff --git a/tracwiki/AssuredTooChain.trac b/tracwiki/AssuredTooChain.trac
new file mode 100644
index 0000000..e4cd7ab
--- /dev/null
+++ b/tracwiki/AssuredTooChain.trac
@@ -0,0 +1,14 @@
+= Issues of an Assured Tool-Chain =
+
+We do not have any assurance that our basic tools are not compromised.
+* Compilers
+* Operating Systems
+* Hardware Platforms
+* Verilog and Other Tools to Produce Chips
+
+At the base, is the compiler. The fear was first formally expressed in
+Ken Thompson's 1984 Turing Award Lecture
+[http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf Reflections on Trusting Trust].
+
+David A. Wheeler's PhD thesis, [http://www.dwheeler.com/trusting-trust/ Fully Countering Trusting Trust through Diverse Double-Compiling]
+outlines how we might deal with the compiler trust conundrum. \ No newline at end of file