Re:A public TrueCrypt Audit
by lambada on Wednesday October 09, 2013 @04:25PM
(#6523592)
That would require a deterministic/reproducible build process. Such things tend to need the same host-OS, library versions, dependency versions etc that AFAIK Truecrypt haven't got documented anywhere. See the efforts of Tor Project, Debian et al to start doing reproducible builds - It's not easy. And this is without things inherently producing non-deterministic builds - embedding timestamps is quite common for example.
https://wiki.debian.org/ReproducibleBuilds