AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 15 Bitcoin

docs(crypto): reproduce third-party license texts in crypto/LICENSE (#7529)

Public commit record

What the developer wrote

Authored by petrsusil

93/100 · Strong
docs(crypto): reproduce third-party license texts in crypto/LICENSE (#7529)

* docs(crypto): reproduce third-party license texts in crypto/LICENSE

Several components of crypto are not covered by the MIT license at the top
of crypto/LICENSE, and some of them (Gifford's SHA-2, the Monero files,
Gladman's AES) require their copyright notice and disclaimer to accompany
binary distributions as well as source. Until now that text existed only in
the individual file headers, which a binary consumer never receives.

Append to crypto/LICENSE a verbatim reproduction of every third-party
license, the files each one covers, the additional copyright holders under
the MIT terms, the public domain / CC0 components, and the GPL-licensed
files. Point at it from LICENSE.md and state that it must be distributed
together with binaries built from crypto.

No code changes; the existing MIT block is unmodified.

* chore: change licence of first-party code from GPL to MIT

(cherry picked from commit e7be2cc8cfffe6906ab7cb96958e8e67d88372f2)

* docs(crypto): add missing third-party attributions to crypto/LICENSE

Add entries for files whose authorship was missing or covered by an
over-broad glob: Dusan Klinec's monero sources, aes/aestst.c under
Brian Gladman's older non-endorsement licence variant, Andrew Moon's
poly1305-donna, and D. J. Bernstein's eSTREAM ECRYPT headers. Narrow
the chacha20poly1305/ entry to the files actually written by Will Glozer.

(cherry picked from commit e7a3c82d6d99548f428a45d5d6caf108795463ac)

* chore: fix typos in licences

(cherry picked from commit f23f9b659e3520ddd962c29b3b59e67a3d30a318)

---------

Co-authored-by: Ondřej Vejpustek <ondrej.vejpustek@satoshilabs.com>
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
The short version

What changed, and why it matters

This commit is purely legal and administrative housekeeping. It adds missing third-party copyright notices and license texts to the crypto/LICENSE file, fixes a typo in a few license headers, and changes the stated license of some first-party files from GPL to MIT. No executable code was changed, so it cannot introduce a security vulnerability or fix one.

Recommended action

No security action required. Reviewers may verify that the new license text accurately reflects the upstream licenses of the bundled third-party code.

Security signals we found

No strong security signals were identified.

Risk score

Why this scored 15/100

Our methodology →
Potential impact 0/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 0/15
Confidence 10/10
Evidence quality 5/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.