https://bugzilla.redhat.com/show_bug.cgi?id=2005536 Robert-André Mauchin 🐧 <zebob.m(a)gmail.com&gt; changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2002464 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2002464 [Bug 2002464] F36FailsToInstall: rust-curve25519-dalek+fiat-crypto-devel, rust-curve25519-dalek+fiat_u32_backend-devel, rust-curve25519-dalek+fiat_u64_backend-devel, rust-curve25519-dalek+packed_simd-devel -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=2005536

https://bugzilla.redhat.com/show_bug.cgi?id=2005536 Fabio Valentini <decathorpe(a)gmail.com&gt; changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(zebob.m(a)gmail.com | |) -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=2005536

https://bugzilla.redhat.com/show_bug.cgi?id=2005536 Robert-André Mauchin 🐧 <zebob.m(a)gmail.com&gt; changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(zebob.m(a)gmail.com |needinfo?(decathorpe@gmail. |) |com) --- Comment #4 from Robert-André Mauchin 🐧 <zebob.m(a)gmail.com&gt; --- (In reply to Fabio Valentini from comment #2) I've updated the SPEC if you want to have a look. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=2005536

https://bugzilla.redhat.com/show_bug.cgi?id=2005536 Fabio Valentini <decathorpe(a)gmail.com&gt; changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |182235 (FE-Legal) Flags|needinfo?(decathorpe@gmail. | |com) | --- Comment #6 from Fabio Valentini <decathorpe(a)gmail.com&gt; --- Package looks good to me, with one exception. The fiat-crypto crate ships implementations of many elliptic curves, some of which aren't explicitly listed as "permitted in Fedora" here: https://fedoraproject.org/wiki/Legal:ECC There has been some discussion about whether any elliptic curves are actually still not "good", but we haven't received any definitive resonses from Red Hat legal: https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.o... Looks like the curves implemented in fiat-crypto are: - Curve 25519: listed as OK - p224 / secp224r1: listed as OK - p256 / secp256r1: listed as OK - p384 / secp384r1: listed as OK - p434: not listed as OK; cannot find any documentation or source for this curve - p448 / Curve 448: listed as OK - p521 / secp521r1: listed as OK - secp256k1: listed as OK Blocking FE-Legal. We need to know whether the p434 curve is OK ... Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=182235 [Bug 182235] Fedora Legal Tracker -- You are receiving this mail because: You are always notified about changes to this product and component You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2005536

https://bugzilla.redhat.com/show_bug.cgi?id=2005536 --- Comment #8 from Fabio Valentini <decathorpe(a)gmail.com&gt; --- Finally got an actionable response from Red Hat Legal after asking ** a third time **: https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.o... The relevant part: All code related to p434 curve will need to removed from the upstream tarball and the Fedora package can only use a "cleaned" tarball. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=2005536