[Gnuk-users] [PATCH 0/7] Gnuk: add support for Cortex M4 MCU

[Aurelien Jarno]

On 2017-10-16 12:16, NIIBE Yutaka wrote:
> Aurelien Jarno <aurelien at aurel32.net> wrote:
> > This patchset adds support and optimizations for Cortex M4 MCU (and
> > later). It is not fully useable until support for such an MCU is merged
> > into into Chopstx, but can already be used when running Gnuk on GNU/Linux
> > in emulation mode on an ARM v7 CPU.
> 
> Great.  Thanks your sharing your efforts.  I'll merge the patchset to
> master.

Thanks.

> Please let me explain about copyright and the condition of
> use-and-distribution of Gnuk and the situation of potion of polarssl in
> Gnuk.
> 
> Gnuk is copyrighted by FSIJ (Free Software Initiative of Japan, a non
> profit organization in Tokyo), and the source code is distributed under
> GPLv3+.  Because its use is for the firmware in USB device, the
> condition of binary is a bit tricky.  As I wrote in another mesage to
> this list today, binary distribution which includes FSIJ's VID is not
> free in terms of Free Software Definition, unfortunately.  It's bound to
> the agreement between FSIJ and USB-IF.  FSIJ can only allow limited use
> of its VID which is considered OK (= not accused by USB-IF), and cannot
> allow binary distribution in general.
> 
> I think that your code is copyrighted by yourself and you agree the
> current condition of use-and-distribution.  Specifically, please accept
> FSIJ's putting restriction of its VID usage with Gnuk (not allowing
> binary distribution which includes FSIJ's VID).
> 
> If not, please describe your request.  I wish your request will not
> complicate the situation further.

I am fine with releasing my changes under GPLv3+, and I understand the
agreement with USB-IF. Actually I fully understand it's not directly
related to FSIJ and Gnuk, many hardware projects got the issue. Some
projects had a more liberal usage of their VID than Gnuk (like giving
or selling PID), and since then the USB-IF has been more strong to make
sure everybody follows the agreement.
 
> Speaking about my own situation, once, I have said publicly that my code
> should be 100% free software, always.  (I didn't expect I encounter such
> a tricky situation.)  One of the reasons why I assign my work for Gnuk
> to FSIJ is to keep sane myself. :-)

From what I understand I don't have to assign my work for Gnuk to FSIJ,
correct?

> Gnuk includes a fork of PolarSSL.  Once I tried to ask merging my
> changes to Paul Bakker, but major changes of mine were not included
> (while some were included).  Then, I changed it heavily, as a fork.
> Meanwhile, PolarSSL renamed to mbedTLS.  The upstream RSA routines
> changed, introducing base blinding and exponent blinding.  Gnuk doesn't
> use base blinding.  Gnuk has not merged the upstream change of exponent
> blinding.
> 
> Currently, I don't have any idea to spent my time for merging my changes
> into upstream.

When looking at the whole picture, Gnuk is using a very small subset of
PolarSSL.

It might make sense to submit the MULADDC part to mbedTLS, especially
now that the upstream has changed. However it depends on the changes you
have done to directly use the pointers in the asm code instead of
copying them first into registers. I'll see if I can find some spare
time to do that.

Aurelien

-- 
Aurelien Jarno                          GPG: 4096R/1DDD8C9B
aurelien at aurel32.net                 http://www.aurel32.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/gnuk-users/attachments/20171016/b978cdb0/attachment.sig>