On Mon, 2025-11-17 at 19:52 +0000, David Howells wrote: > Eric Biggers <[email protected]> wrote: > > > In comparison, BoringSSL has an entire implementation of ML-DSA, > > ... > > ... which cannot be used in the kernel due to the licence.
The licence problem is not insurmountable. There are now real lawyers (not just me) prepared to stand up and say Apache-2 is GPL-2 compatible: https://digitalcommons.law.scu.edu/chtlj/vol40/iss3/2/ But even if you don't accept that, Google keeps effective joint ownership of the code through their CLA and so could grant a dual licence to the kernel anyway without needing to refer to any contributors. Regards, James
