Bitcoin Build System Security: Turtles All the Way Down
summary
Reproducible builds (Gitian) stop arbitrary uploads but not poisoned toolchains that implement Ken Thompson style attacks; the claim is that switching to Guix makes the Bitcoin build bootstrapable so toolchains are auditable back to a tiny seed. Working Bitcoin builds exist for all supported Linux architectures; OS X and Windows are in progress. The current bootstrap seed shrinks from 232 MB → 131 MB by removing GCC via the Mess project, with a planned path to hex0 (357 bytes) as the single trusted binary.
AI-written summary · about
chapters (10)
- 0:00Start
- 1:09Download Bitcoin Core
- 2:50Gitian Reproducible Builds
- 4:34Reproducibility is not enough
- 7:21We're Reproducible!
- 7:36We're Reproducibly Malicious
- 9:55Reflections on Rusting Trust
- 10:24Reproducible +
- 13:50Bootstrapping Rust
- 16:13chaincode
related talks
30mHow Secure Is Your Build/Server?
40mReproducible Builds: Unexpected Benefits and Problems
20mStageX: Rebuilding Trust Through Multi-Signed, Full-Source Bootstrapped, and Reproducible Builds
13mDon’t Trust, Verify. Reproducible Builds in Bitcoin
07mReproducible Builds
18mYou Can Sign It, But Can You Trust It? Securing the Compilation Process
47mReproducible builds
45mWhat Makes A Build Reproducible?