Students: Elias Lundell, Eskil Nyberg
Supervisor: Aman Sharma, Examiner: Martin Monperrus
A Degree Project, First Cycle, to perform Diverse Double-Compiling (DDC) for Java. The project implemented DDC for the javac compiler and used it to verify a release of the JDK: Temurin 21.0.5-ga. Note that, since there exists no truly trusted compiler in the Java ecosystem, this verification only supports the hypothesis that Temurin's release of the JDK is not infected by a trusting trust attack - it does not prove it.
The project's corresponding thesis is available at this link: [LINK TBA].
If you are interested in reproducing our work, feel free to take a look at our implementations in Docker (for typical use-cases) or in Red Hat Enterprise Linux (RHEL) for the verification of Temurin.