Importing Wycheproof into crypto libraries as a regression test

[Doug Hogan]

I am interested in porting Wycheproof to a few non-Java crypto libraries
as part of the normal regression tests. I noticed there is a discussion
about extracting the test vectors in the future into an easier to
consume text file so non-Java libraries can also use it.

Will those test vectors still be Apache 2 licensed? It will be a
problem adding support in LibreSSL for Wycheproof in that case.
LibreSSL is part of OpenBSD and OpenBSD doesn't allow for Apache 2
licensed code in the main tree. Would it be possible to relicense it
using ISC? BoringSSL is using ISC for new code and LibreSSL is able to
accept and submit patches with them.

If possible, relicensing the Java code would be great as well so I don't
need to wait. I can't commit it, but I started extracting the test
vectors from Wycheproof in order to test C and Go libraries.

[Daniel Bleichenbacher]

On Wed, Jan 4, 2017 at 5:55 PM, Doug Hogan <do...@acyclic.org> wrote:

I am interested in porting Wycheproof to a few non-Java crypto libraries
as part of the normal regression tests.  I noticed there is a discussion
about extracting the test vectors in the future into an easier to
consume text file so non-Java libraries can also use it.

 

Yes, there are plans to  release the test vectors in text files.

Though at the moment I'm not yet sure what a good format would be.

E.g., simple C structs are one possiblity. Test vector generation is in python

and changing the format to other languages is not a problem at all.

Will those test vectors still be Apache 2 licensed?  It will be a
problem adding support in LibreSSL for Wycheproof in that case.
LibreSSL is part of OpenBSD and OpenBSD doesn't allow for Apache 2
licensed code in the main tree.  Would it be possible to relicense it
using ISC?  BoringSSL is using ISC for new code and LibreSSL is able to
accept and submit patches with them.

Unfortunately I can't answer questions about licensing.

 

If possible, relicensing the Java code would be great as well so I don't
need to wait.  I can't commit it, but I started extracting the test
vectors from Wycheproof in order to test C and Go libraries.

--
You received this message because you are subscribed to the Google Groups "wycheproof-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wycheproof-users+unsubscribe@googlegroups.com.
To post to this group, send email to wycheproof-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wycheproof-users/20170104165536.GB85838%40acyclic.org.
For more options, visit https://groups.google.com/d/optout.

[Thai Duong]

I'll talk to the lawyercats, but please don't expect too much as Apache2 is the standard license for all Google open source projects.

[Thai Duong]

On Thu, Jan 5, 2017 at 4:23 AM, Thai Duong <tha...@google.com> wrote:

On Wed, Jan 4, 2017 at 8:55 AM, Doug Hogan <do...@acyclic.org> wrote:

I am interested in porting Wycheproof to a few non-Java crypto libraries
as part of the normal regression tests.  I noticed there is a discussion
about extracting the test vectors in the future into an easier to
consume text file so non-Java libraries can also use it.

Will those test vectors still be Apache 2 licensed?  It will be a
problem adding support in LibreSSL for Wycheproof in that case.
LibreSSL is part of OpenBSD and OpenBSD doesn't allow for Apache 2
licensed code in the main tree.  Would it be possible to relicense it
using ISC?  BoringSSL is using ISC for new code and LibreSSL is able to
accept and submit patches with them.

If possible, relicensing the Java code would be great as well so I don't
need to wait.  I can't commit it, but I started extracting the test
vectors from Wycheproof in order to test C and Go libraries.

I'll talk to the lawyercats, but please don't expect too much as Apache2 is the standard license for all Google open source projects.

I'm sorry, but the lawyers told me that we cannot re-license to ISC :-(.

It looks like the only way moving forward is that OpenBSD makes an exception for Wycheproof.