NOTICE

Legal notices below.  See LICENSE and CONTRIBUTORS for additional
information.  All links were valid at the time they were added to
this file.

=======================================================================

fd_hash and fd_hash_memcpy are currently a modified implementation of
the hashing algorithm in xxHash(r39).  xxHash(r39) can be found at
https://github.com/Cyan4973/xxHash/releases/tag/r39 (note the xxHash
source code repository has changed location a few times over the years).

From https://github.com/Cyan4973/xxHash/archive/refs/tags/r39.zip at xxHash-r39/LICENSE:

xxHash Library
Copyright (c) 2012-2014, Yann Collet
All rights reserved.

Redistribution and use in source and binary forms, with or without modification,
are permitted provided that the following conditions are met:

* Redistributions of source code must retain the above copyright notice, this
  list of conditions and the following disclaimer.

* Redistributions in binary form must reproduce the above copyright notice, this
  list of conditions and the following disclaimer in the documentation and/or
  other materials provided with the distribution.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

=======================================================================

fd_uint_hash and fd_ulong_hash are currently based on the final full
avalanche integer mixing functions, fmix32 and fmix64, found in the
MurmurHash3 hashing algorithm.  Murmur3 can be found at
https://github.com/aappleby/smhasher.

From https://github.com/aappleby/smhasher/blob/master/src/MurmurHash3.cpp#L2

// MurmurHash3 was written by Austin Appleby, and is placed in the public
// domain. The author hereby disclaims copyright to this source code.

=======================================================================

The sha512 implementation in src/ballet/sha512 is currently a modified
implementation of the OpenSSL sha512 implementation circa 2022-Oct.
From
https://github.com/openssl/openssl/blob/master/crypto/sha/sha512.c#L1:

/*
 * Copyright 2004-2022 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the Apache License 2.0 (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

OpenSSL licensing details can be found at:

  https://github.com/openssl/openssl/blob/master/LICENSE.txt

The assembly language file in src/ballet/sha512/fd_sha512_core_avx2.S
contains autogenerated assembly code produced by OpenSSL's sha512 AVX2
asm code generator.  From crypto/sha/asm/sha512-x86_64.pl#L2:

# Copyright 2005-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the OpenSSL license (the "License").  You may not use
# this file except in compliance with the License.  You can obtain a copy
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html

and crypto/perlasm/x86_64-xlate.pl#L1:

# Copyright 2005-2020 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the OpenSSL license (the "License").  You may not use
# this file except in compliance with the License.  You can obtain a copy
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html

Similarly the sha256 implementation in src/ballet/sha256 is based on the
OpenSSL sha256 implementation and the assembly language file
src/ballet/sha256/fd_sha256_core_shaext.S contains autogenerated
assembly code produced by OpenSSL's sha256 SHA extension assembly
generator.  The corresponding license terms are the same as sha512 and
can be found at crypto/sha/sha256.c#L1, crypto/sha/asm/sha256-586.pl#L2
and crypto/perlasm/x86asm.pl#L2 (all circa 2022-Dec).

Further description of the modifications can be found in the
implementations themselves.

=======================================================================

The ed25519 implementation in src/ballet/ed25519 is currently a very
heavily optimized implementation originally based on the OpenSSL ed25519
implementation circa 2022-Oct.

From
https://github.com/openssl/openssl/blob/master/crypto/ec/curve25519.c#L1:

/*
 * Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the OpenSSL license (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

=======================================================================

The X25519 implementation in src/ballet/ed25519 is adapted from the Go
standard library and modified to use the aforementioned fd_ed25519 API.

From
https://github.com/golang/go/blob/master/src/crypto/ecdh/x25519.go

// Copyright 2022 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

From
https://github.com/golang/go/blob/master/LICENSE

Copyright (c) 2009 The Go Authors. All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:

   * Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
   * Redistributions in binary form must reproduce the above
copyright notice, this list of conditions and the following disclaimer
in the documentation and/or other materials provided with the
distribution.
   * Neither the name of Google Inc. nor the names of its
contributors may be used to endorse or promote products derived from
this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

=======================================================================

Test vectors for SHA-2 hash functions and the AES block cipher were
copied from the NIST Cryptographic Algorithm Validation Program (CAVP)
website.

Source of SHA-2 test vectors: https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Secure-Hashing (circa 2022-Dec)
Source of AES test vectors: https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/block-ciphers#AES (circe 2023-Aug)
Source of license text: https://www.nist.gov/open/copyright-fair-use-and-licensing-statements-srd-data-software-and-technical-series-publications#software (circa 2022-Dec)

NIST-developed software is provided by NIST as a public service. You may use, copy, and distribute copies of the software in any medium, provided that you keep intact this entire notice. You may improve, modify, and create derivative works of the software or any portion of the software, and you may copy and distribute such modifications or works. Modified works should carry a notice stating that you changed the software and should note the date and nature of any such change. Please explicitly acknowledge the National Institute of Standards and Technology as the source of the software.

NIST-developed software is expressly provided "AS IS." NIST MAKES NO WARRANTY OF ANY KIND, EXPRESS, IMPLIED, IN FACT, OR ARISING BY OPERATION OF LAW, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND DATA ACCURACY. NIST NEITHER REPRESENTS NOR WARRANTS THAT THE OPERATION OF THE SOFTWARE WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT ANY DEFECTS WILL BE CORRECTED. NIST DOES NOT WARRANT OR MAKE ANY REPRESENTATIONS REGARDING THE USE OF THE SOFTWARE OR THE RESULTS THEREOF, INCLUDING BUT NOT LIMITED TO THE CORRECTNESS, ACCURACY, RELIABILITY, OR USEFULNESS OF THE SOFTWARE.

You are solely responsible for determining the appropriateness of using and distributing the software and you assume all risks associated with its use, including but not limited to the risks and costs of program errors, compliance with applicable laws, damage to or loss of data, programs or equipment, and the unavailability or interruption of operation. This software is not intended to be used in any situation where a failure could cause risk of injury or damage to property. The software developed by NIST employees is not subject to copyright protection within the United States.

=======================================================================

The AES-ECB and AES-GCM implementations in src/ballet/aes were adapted
from the OpenSSL project (ca 2023-Aug).

The following OpenSSL C sources were partially copied and heavily
modified/simplified to fit the Firedancer code style:
- include/crypto/aes_platform.h
- crypto/evp/e_aes.c
- crypto/modes/gcm128.c
- providers/implementations/ciphers/ciphercommon_gcm.c
- providers/implementations/ciphers/ciphercommon_gcm_hw.c

Resulting in the following Firedancer C sources:
- src/ballet/aes/fd_aes_base_ref.c
- src/ballet/aes/fd_aes_gcm_ref_ghash.c
- src/ballet/aes/fd_aes_gcm_ref.c
- src/ballet/aes/fd_aes_gcm_ref.h

The following OpenSSL code generators were used to produce autogenerated
assembly code.
- crypto/aes/asm/aesni-x86_64.pl

Resulting in the following Firedancer assembly code:
- src/ballet/aes/fd_aes_base_aesni.S

Further description of the modifications can be found in the
implementations themselves.

=======================================================================

The high-performance AES-GCM implementation for x86 was copied from
submissions to the Linux kernel by Eric Biggers <ebiggers@google.com>
(ca 2024-Aug).

The following files were copied and adapted to build outside of the
Linux kernel.
- src/ballet/aes/fd_aes_gcm_aesni.S
- src/ballet/aes/fd_aes_gcm_avx10.S

/* SPDX-License-Identifier: Apache-2.0 OR BSD-2-Clause */

=======================================================================

//src/util/sanitizers is a modified version of LLVM project compiler-rt
taken ca 2023-Jan.

LLVM project mirror: https://github.com/llvm/llvm-project

See https://llvm.org/LICENSE.txt for license information.
SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception

=======================================================================

fd_chacha20 implements the 20 round variant of ChaCha, a stream cipher
by Daniel J. Bernstein.

From https://cr.yp.to/chacha.html and https://datatracker.ietf.org/doc/html/rfc7539

=======================================================================

The BLAKE3 implementation in src/ballet/blake3 is currently a modified
implementation of the BLAKE3 project implementation circa 2023-May.
From
https://github.com/BLAKE3-team/BLAKE3/tree/master/c

OpenSSL licensing details can be found at:

  https://github.com/BLAKE3-team/BLAKE3/blob/master/LICENSE

# Copyright 2019 Jack O'Connor and Samuel Neves
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
# http://www.apache.org/licenses/LICENSE-2.0

=======================================================================

The CBMC verification framework in the 'verification' dir is based on
https://github.com/model-checking/cbmc-starter-kit

Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.

Permission is hereby granted, free of charge, to any person obtaining a copy of this
software and associated documentation files (the "Software"), to deal in the Software
without restriction, including without limitation the rights to use, copy, modify,
merge, publish, distribute, sublicense, and/or sell copies of the Software, and to
permit persons to whom the Software is furnished to do so.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

=======================================================================

The SipHash implementation in src/ballet/siphash13 is derived from
https://github.com/antirez/siphash

Copyright (c) 2012-2016 Jean-Philippe Aumasson
<jeanphilippe.aumasson@gmail.com>
Copyright (c) 2012-2014 Daniel J. Bernstein <djb@cr.yp.to>
Copyright (c) 2017 Salvatore Sanfilippo <antirez@gmail.com>
Modified 2023 by Firedancer Contributors

To the extent possible under law, the author(s) have dedicated all copyright
and related and neighboring rights to this software to the public domain
worldwide. This software is distributed without any warranty.

You should have received a copy of the CC0 Public Domain Dedication along
with this software. If not, see
<http://creativecommons.org/publicdomain/zero/1.0/>.

=======================================================================

'src/flamenco/nanopb' is currently a copy of the Nanopb library at
https://jpa.kapsi.fi/nanopb/ (imported ca 2023-Nov).

Copyright (c) 2011 Petteri Aimonen <jpa at nanopb.mail.kapsi.fi>

This software is provided 'as-is', without any express or
implied warranty. In no event will the authors be held liable
for any damages arising from the use of this software.

Permission is granted to anyone to use this software for any
purpose, including commercial applications, and to alter it and
redistribute it freely, subject to the following restrictions:

1. The origin of this software must not be misrepresented; you
   must not claim that you wrote the original software. If you use
   this software in a product, an acknowledgment in the product
   documentation would be appreciated but is not required.

2. Altered source versions must be plainly marked as such, and
   must not be misrepresented as being the original software.

3. This notice may not be removed or altered from any source
   distribution.

=======================================================================

'src/ballet/http' contains a copy of the PicoHTTPParser library at
https://github.com/h2o/picohttpparser (imported ca 2023-Nov). Commit
hash 066d2b1e9ab820703db0837a7255d92d30f0c9f5

Copyright (c) 2009-2014 Kazuho Oku, Tokuhiro Matsuno, Daisuke Murase,
                        Shigeo Mitsunari

The software is licensed under either the MIT License (below) or the Perl
license.

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to
deal in the Software without restriction, including without limitation the
rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
sell copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
IN THE SOFTWARE.

=======================================================================

'src/ballet/http' conains a modified copy of the teeny-sha1 library at
https://github.com/CTrabant/teeny-sha1 (imported ca 2024-Jun). Commit
hash f05a2d0019e12850bb482274c1a21ae7a4fb84bd

MIT License

Copyright (c) 2016

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

=======================================================================

'src/ballet/json' is a copy of the cJSON library at
https://github.com/DaveGamble/cJSON (imported ca 2023-Dec). Commit
hash cb8693b058ba302f4829ec6d03f609ac6f848546

Copyright (c) 2009-2017 Dave Gamble and cJSON contributors

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.

=======================================================================

The UTF-8 validator in src/ballet/fd_utf8.c is derived from the Rust
standard library taken ca 2023-May.

Source: https://github.com/rust-lang/rust/blob/master/library/core/src/str/validations.rs

See https://github.com/rust-lang/rust/blob/master/LICENSE-APACHE for
license information.  SPDX-License-Identifier: MIT or Apache-2.0

=======================================================================

The code in src/ballet/fiat-crypto was generated using Fiat-Crypto.

The Apache License, Version 2.0 (Apache-2.0)

Copyright 2015-2020 the fiat-crypto authors (see the AUTHORS file)

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.


====

the secp256k1 library is licensed as follows

===

Copyright (c) 2013 Pieter Wuille

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.

=======================================================================

Firedancer binaries include cryptographic subroutines from s2n-bignum.
Imported ca 2024-Nov.

https://github.com/awslabs/s2n-bignum/

SPDX-License-Identifier: Apache-2.0 OR ISC or MIT-0

Copyright Amazon.com, Inc. or its affiliates.

Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby granted, provided that the above
copyright notice and this permission notice appear in all copies.

THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.