From 891730d13b324fad916572a82f0bd610c5de9aad Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Sun, 13 Sep 2020 23:06:24 +0000 Subject: Rename for conversion --- raw-wiki-dump/AssuredTooChain.trac | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 raw-wiki-dump/AssuredTooChain.trac (limited to 'raw-wiki-dump/AssuredTooChain.trac') diff --git a/raw-wiki-dump/AssuredTooChain.trac b/raw-wiki-dump/AssuredTooChain.trac new file mode 100644 index 0000000..e4cd7ab --- /dev/null +++ b/raw-wiki-dump/AssuredTooChain.trac @@ -0,0 +1,14 @@ += Issues of an Assured Tool-Chain = + +We do not have any assurance that our basic tools are not compromised. +* Compilers +* Operating Systems +* Hardware Platforms +* Verilog and Other Tools to Produce Chips + +At the base, is the compiler. The fear was first formally expressed in +Ken Thompson's 1984 Turing Award Lecture +[http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf Reflections on Trusting Trust]. + +David A. Wheeler's PhD thesis, [http://www.dwheeler.com/trusting-trust/ Fully Countering Trusting Trust through Diverse Double-Compiling] +outlines how we might deal with the compiler trust conundrum. \ No newline at end of file -- cgit v1.2.3