Re: [PATCH v9 2/9] crypto: Add ML-DSA/Dilithium verify support

[James Bottomley]

On Mon, 2025-11-17 at 19:52 +0000, David Howells wrote:
> Eric Biggers <ebiggers@xxxxxxxxxx> wrote:
> 
> > In comparison, BoringSSL has an entire implementation of ML-DSA,
> > ...
> 
> ... which cannot be used in the kernel due to the licence.

The licence problem is not insurmountable.  There are now real lawyers
(not just me) prepared to stand up and say Apache-2 is GPL-2
compatible:

https://digitalcommons.law.scu.edu/chtlj/vol40/iss3/2/

But even if you don't accept that, Google keeps effective joint
ownership of the code through their CLA and so could grant a dual
licence to the kernel anyway without needing to refer to any
contributors.

Regards,

James