Dual licensing

[dstebila]

In liboqs we've gotten some feedback (open-quantum-safe/liboqs#1437) that the CC0 license is a barrier to adoption by some distributions. Would SPHINCS+ be willing to consider dual licensing to add another license? See also open-quantum-safe/liboqs#1388 (comment) for comments from the Fedora team.

[dstebila]

Just checking to see if there's been any progress on this front.

[bwesterb]

The team seems happy to accommodate Fedora, but we're still discussing which exact combination of licenses to use.

[dstebila]

Hi Bas, were you able to reach a conclusion on this?

[MrPugh]

I added a branch 'license' to tackle the issue; please check and comment.

[MrPugh]

I am not sure how to handle the NIST files:

ref/PQCgenKAT_sign.c
ref/rng.c
ref/rng.h

[dstebila]

It shouldn't be a problem to leave those as is, and make a comment in the README or LICENSE file that those files retain their original license. Downstream projects like OQS won't actually make use of those files in compiled libraries, so the resulting binaries will still be cleanly licensed.