可重现构建(英語:Reproducible builds)也被称为确定性编译(英語:deterministic compilation),这是一个编译软件的过程,能够确保生成的二进制代码(也就是机器码)可以重现。使用确定性编译编译的源代码将始终输出相同的二进制文件。[1][2]

可重现构建的标志

可重现构建可以作为信任鏈的一部分,[1]这是因为源代码可以签名,这样就可以证明二进制文件是从受信任的源代码编译的。

参考文献 编辑

  1. ^ 1.0 1.1 reproducible-builds.org. reproducible-builds.org. [2016-08-22]. (原始内容存档于2016-05-20). Reproducible builds are a set of software development practices which create a verifiable path from human readable source code to the binary code used by computers....build system needs to be made entirely deterministic: transforming a given source must always create the same result. 
  2. ^ Ratliff, Emily. Establishing Correspondence Between an Application and its Source Code | SecurityWeek.com. www.securityweek.com. SecurityWeek. 2016-04-04 [2016-08-22]. (原始内容存档于2016-09-20).