[tor-bugs] #22769 [Core Tor/Tor]: Investigate the reproducibility of Rust binaries

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jun 29 19:30:15 UTC 2017


#22769: Investigate the reproducibility of Rust binaries
------------------------------+----------------------------
     Reporter:  isis          |      Owner:
         Type:  task          |     Status:  new
     Priority:  Medium        |  Milestone:
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:  rust, SponsorZ
Actual Points:                |  Parent ID:
       Points:  3             |   Reviewer:
      Sponsor:  SponsorZ      |
------------------------------+----------------------------
 If we are going to start writing more Tor things in Rust, it would be nice
 to understand the reproducibility of binaries created with rustc. I
 suspect the Tor Browser Team would also be interested in having these
 results, since parts of Firefox are now written in Rust, and soon (ESR
 58?) it will no longer be optional to use them.

 '''Note: this ticket is ''not'' about the reproducibility of rustc
 iteself.''' That is an extremely deep rabbit hole (trust me, I have a
 rustc chained back to the OCaml days). Someday we may need to explore
 that, but that time is not now.

 My approach for this task would be probably be to create a Docker instance
 which builds some trivial Rust program, and then run the Docker instance
 on different machines and compare the hashes of the binaries (then
 optionally investigate the differences using whatever tools like running
 strings and moving up to Ida or whatever).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22769>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list