Hi Sumit,
On Fri, Sep 28, 2018 at 11:59:33AM +0530, Sumit Garg wrote:
Please help to answer below query from Michael regarding licensing concerns for using Global Platform specs content in OP-TEE.
This dates back to ~2014 before OP-TEE had been pushed as an open source project and indeed the click-through license was one thing that was discussed before we decided to publish this. Having that said, the legal people at ST (back then the project was owned by ST) concluded that we could use the GP click-through license for the APIs, this is a copy/paste from an email discussion with ST (in 2014).
"On the legal side, one week ago our legal dedicated to this matter wrote “Progress! Finally, having discussed with colleagues, we have concluded that we can use the GP click-through license for the APIs. Therefore I just need to tidy up the following points and we will be able to provide both the CLA and the license terms for the distribution quite quickly […].”
I don't know how the discussion went inside ST nor who the legal person was, but since ST had people on GlobalPlatform boards back then, I suppose that the ST legal people went that way. The only way to find out more about this is to talk directly to ST legal people who were involved in this back in the days.
Thanks Joakim for this info.
Mike,
Please share your views on this and if we could include content from Global Platform spec into MdePkg as an industry standard.
Having had a discussion about this, the bit that concerns us the most is the export restrictions clause of the click-through license which contains the very unfortunate part "or any product complying with the Specification.".
Someone must have thought this interface defines cryptography, rather than an API through which to call cryptography functions.
I don't like it, but without a change in that license I don't see how we can include this interface in edk2. One workaround would be to publish this in a separate repository on https://github.com/OP-TEE/ which could be included in builds using PACKAGES_PATH (like we do with edk2-platforms and edk2-non-osi).
/ Leif