Skip to content

Comment on How I compiled TrueCrypt 7.1a for Win32 and matched the official binariesparent

Comments

Deterministic builds are hard...really hard.

I'd have thought that deterministic builds are really simple unless your toolkit ecosystem is FUBAR. After all, a compiler is a simple function from input to output (unless the FUBAR ecosystem syndrome arises, as I said).

Here is a not-in-depth look at what's involved in trying to generate byte-for byte binaries on msvc:

http://stackoverflow.com/questions/1180852/deterministic-bui...

In short, if you ignore certain things when comparing binaries and make sure you build things on absolute path of the same length(!), you can tell binaries are functionally equivalent.

Well, the parent poster would say that if binaries depend on the path length of build location, then that's evidence of a FUBAR toolchain :)

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.