可重現構建(英語:Reproducible builds)也被稱為確定性編譯(英語:deterministic compilation),這是一個編譯軟件的過程,能夠確保生成的二進制代碼(也就是機器碼)可以重現。使用確定性編譯編譯的原始碼將始終輸出相同的二進制文件。[1][2]

可重現構建的標誌

可重現構建可以作為信任鏈的一部分,[1]這是因為原始碼可以簽名,這樣就可以證明二進制文件是從受信任的原始碼編譯的。

參考文獻 編輯

  1. ^ 1.0 1.1 reproducible-builds.org. reproducible-builds.org. [2016-08-22]. (原始內容存檔於2016-05-20). Reproducible builds are a set of software development practices which create a verifiable path from human readable source code to the binary code used by computers....build system needs to be made entirely deterministic: transforming a given source must always create the same result. 
  2. ^ Ratliff, Emily. Establishing Correspondence Between an Application and its Source Code | SecurityWeek.com. www.securityweek.com. SecurityWeek. 2016-04-04 [2016-08-22]. (原始內容存檔於2016-09-20).