Beyond Bitwise: A Framework for Verifying the Equivalence of Binaries from Alternative Builds
Abstract: Software supply chain attacks from SolarWinds and XZ Utils to compromised build pipelines have made it critical to verify that software binaries are trustworthy. A natural defense is to…