sphincs · adrien-n · Dec 12, 2024
diff --git a/haraka-aesni/Makefile b/haraka-aesni/Makefile
@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+# Copyright: TBD
+
 PARAMS = sphincs-haraka-128f
 THASH = robust
 

diff --git a/ref/Makefile b/ref/Makefile
@@ -1,3 +1,6 @@
+# SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+# Copyright: TBD
+
 PARAMS = sphincs-haraka-128f
 THASH = robust
 

diff --git a/ref/PQCgenKAT_sign.c b/ref/PQCgenKAT_sign.c
@@ -1,10 +1,14 @@
+/*
+ * SPDX-License-Identifier: NIST-Software
+ * Copyright: National Institute of Standards and Technology; The software developed by NIST employees is not subject to copyright protection within the United States.
+ *
+NIST-developed software is provided by NIST as a public service. You may use, copy, and distribute copies of the software in any medium, provided that you keep intact this entire notice. You may improve, modify, and create derivative works of the software or any portion of the software, and you may copy and distribute such modifications or works. Modified works should carry a notice stating that you changed the software and should note the date and nature of any such change. Please explicitly acknowledge the National Institute of Standards and Technology as the source of the software.
+
+NIST-developed software is expressly provided "AS IS." NIST MAKES NO WARRANTY OF ANY KIND, EXPRESS, IMPLIED, IN FACT, OR ARISING BY OPERATION OF LAW, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND DATA ACCURACY. NIST NEITHER REPRESENTS NOR WARRANTS THAT THE OPERATION OF THE SOFTWARE WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT ANY DEFECTS WILL BE CORRECTED. NIST DOES NOT WARRANT OR MAKE ANY REPRESENTATIONS REGARDING THE USE OF THE SOFTWARE OR THE RESULTS THEREOF, INCLUDING BUT NOT LIMITED TO THE CORRECTNESS, ACCURACY, RELIABILITY, OR USEFULNESS OF THE SOFTWARE.
+
+You are solely responsible for determining the appropriateness of using and distributing the software and you assume all risks associated with its use, including but not limited to the risks and costs of program errors, compliance with applicable laws, damage to or loss of data, programs or equipment, and the unavailability or interruption of operation. This software is not intended to be used in any situation where a failure could cause risk of injury or damage to property. The software developed by NIST employees is not subject to copyright protection within the United States.
+*/
 
-//
-//  PQCgenKAT_sign.c
-//
-//  Created by Bassham, Lawrence E (Fed) on 8/29/17.
-//  Copyright © 2017 Bassham, Lawrence E (Fed). All rights reserved.
-//
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>

diff --git a/ref/address.c b/ref/address.c
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #include <stdint.h>
 #include <string.h>
 

diff --git a/ref/address.h b/ref/address.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_ADDRESS_H
 #define SPX_ADDRESS_H
 

diff --git a/ref/api.h b/ref/api.h
@@ -1,3 +1,14 @@
+/*
+ * SPDX-License-Identifier: NIST-Software
+ * Copyright: National Institute of Standards and Technology; The software developed by NIST employees is not subject to copyright protection within the United States.
+ *
+NIST-developed software is provided by NIST as a public service. You may use, copy, and distribute copies of the software in any medium, provided that you keep intact this entire notice. You may improve, modify, and create derivative works of the software or any portion of the software, and you may copy and distribute such modifications or works. Modified works should carry a notice stating that you changed the software and should note the date and nature of any such change. Please explicitly acknowledge the National Institute of Standards and Technology as the source of the software.
+
+NIST-developed software is expressly provided "AS IS." NIST MAKES NO WARRANTY OF ANY KIND, EXPRESS, IMPLIED, IN FACT, OR ARISING BY OPERATION OF LAW, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND DATA ACCURACY. NIST NEITHER REPRESENTS NOR WARRANTS THAT THE OPERATION OF THE SOFTWARE WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT ANY DEFECTS WILL BE CORRECTED. NIST DOES NOT WARRANT OR MAKE ANY REPRESENTATIONS REGARDING THE USE OF THE SOFTWARE OR THE RESULTS THEREOF, INCLUDING BUT NOT LIMITED TO THE CORRECTNESS, ACCURACY, RELIABILITY, OR USEFULNESS OF THE SOFTWARE.
+
+You are solely responsible for determining the appropriateness of using and distributing the software and you assume all risks associated with its use, including but not limited to the risks and costs of program errors, compliance with applicable laws, damage to or loss of data, programs or equipment, and the unavailability or interruption of operation. This software is not intended to be used in any situation where a failure could cause risk of injury or damage to property. The software developed by NIST employees is not subject to copyright protection within the United States.
+*/
+
 #ifndef SPX_API_H
 #define SPX_API_H
 

diff --git a/ref/context.h b/ref/context.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_CONTEXT_H
 #define SPX_CONTEXT_H
 

diff --git a/ref/fips202.c b/ref/fips202.c
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 /* Based on the public domain implementation in
  * crypto_hash/keccakc512/simple/ from http://bench.cr.yp.to/supercop.html
  * by Ronny Van Keer

diff --git a/ref/fips202.h b/ref/fips202.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_FIPS202_H
 #define SPX_FIPS202_H
 

diff --git a/ref/fors.c b/ref/fors.c
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #include <stdlib.h>
 #include <stdint.h>
 #include <string.h>

diff --git a/ref/fors.h b/ref/fors.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_FORS_H
 #define SPX_FORS_H
 

diff --git a/ref/haraka.c b/ref/haraka.c
@@ -1,4 +1,6 @@
 /*
+ * SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ *
  * Constant time implementation of the Haraka hash function.
  *
  * The bit-sliced implementation of the AES round functions are

diff --git a/ref/haraka.h b/ref/haraka.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_HARAKA_H
 #define SPX_HARAKA_H
 

diff --git a/ref/haraka_offsets.h b/ref/haraka_offsets.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #if !defined( HARAKA_OFFSETS_H_ )
 #define HARAKA_OFFSETS_H_
 

diff --git a/ref/hash.h b/ref/hash.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_HASH_H
 #define SPX_HASH_H
 

diff --git a/ref/hash_haraka.c b/ref/hash_haraka.c
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #include <stdint.h>
 #include <string.h>
 

diff --git a/ref/hash_sha2.c b/ref/hash_sha2.c
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #include <stdint.h>
 #include <string.h>
 

diff --git a/ref/hash_shake.c b/ref/hash_shake.c
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #include <stdint.h>
 #include <string.h>
 

diff --git a/ref/merkle.c b/ref/merkle.c
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #include <stdint.h>
 #include <string.h>
 

diff --git a/ref/merkle.h b/ref/merkle.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #if !defined( MERKLE_H_ )
 #define MERKLE_H_
 

diff --git a/ref/params.h b/ref/params.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #define str(s) #s
 #define xstr(s) str(s)
 

diff --git a/ref/params/params-sphincs-haraka-128f.h b/ref/params/params-sphincs-haraka-128f.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-haraka-128s.h b/ref/params/params-sphincs-haraka-128s.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-haraka-192f.h b/ref/params/params-sphincs-haraka-192f.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-haraka-192s.h b/ref/params/params-sphincs-haraka-192s.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-haraka-256f.h b/ref/params/params-sphincs-haraka-256f.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-haraka-256s.h b/ref/params/params-sphincs-haraka-256s.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-sha2-128f.h b/ref/params/params-sphincs-sha2-128f.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-sha2-128s.h b/ref/params/params-sphincs-sha2-128s.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-sha2-192f.h b/ref/params/params-sphincs-sha2-192f.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-sha2-192s.h b/ref/params/params-sphincs-sha2-192s.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-sha2-256f.h b/ref/params/params-sphincs-sha2-256f.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-sha2-256s.h b/ref/params/params-sphincs-sha2-256s.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-shake-128f.h b/ref/params/params-sphincs-shake-128f.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-shake-128s.h b/ref/params/params-sphincs-shake-128s.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-shake-192f.h b/ref/params/params-sphincs-shake-192f.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-shake-192s.h b/ref/params/params-sphincs-shake-192s.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-shake-256f.h b/ref/params/params-sphincs-shake-256f.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/params/params-sphincs-shake-256s.h b/ref/params/params-sphincs-shake-256s.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: CC0-1.0 OR 0BSD OR MIT-0 OR LicenseRef-SPHINCS-PLUS-Public-Domain
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_PARAMS_H
 #define SPX_PARAMS_H
 

diff --git a/ref/randombytes.c b/ref/randombytes.c
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 /*
 This code was taken from the SPHINCS reference implementation and is public domain.
 */

diff --git a/ref/randombytes.h b/ref/randombytes.h
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 #ifndef SPX_RANDOMBYTES_H
 #define SPX_RANDOMBYTES_H
 

diff --git a/ref/rng.c b/ref/rng.c
@@ -1,9 +1,13 @@
-//
-//  rng.c
-//
-//  Created by Bassham, Lawrence E (Fed) on 8/29/17.
-//  Copyright © 2017 Bassham, Lawrence E (Fed). All rights reserved.
-//
+/*
+ * SPDX-License-Identifier: NIST-Software
+ * Copyright: National Institute of Standards and Technology; The software developed by NIST employees is not subject to copyright protection within the United States.
+ *
+NIST-developed software is provided by NIST as a public service. You may use, copy, and distribute copies of the software in any medium, provided that you keep intact this entire notice. You may improve, modify, and create derivative works of the software or any portion of the software, and you may copy and distribute such modifications or works. Modified works should carry a notice stating that you changed the software and should note the date and nature of any such change. Please explicitly acknowledge the National Institute of Standards and Technology as the source of the software.
+
+NIST-developed software is expressly provided "AS IS." NIST MAKES NO WARRANTY OF ANY KIND, EXPRESS, IMPLIED, IN FACT, OR ARISING BY OPERATION OF LAW, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND DATA ACCURACY. NIST NEITHER REPRESENTS NOR WARRANTS THAT THE OPERATION OF THE SOFTWARE WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT ANY DEFECTS WILL BE CORRECTED. NIST DOES NOT WARRANT OR MAKE ANY REPRESENTATIONS REGARDING THE USE OF THE SOFTWARE OR THE RESULTS THEREOF, INCLUDING BUT NOT LIMITED TO THE CORRECTNESS, ACCURACY, RELIABILITY, OR USEFULNESS OF THE SOFTWARE.
+
+You are solely responsible for determining the appropriateness of using and distributing the software and you assume all risks associated with its use, including but not limited to the risks and costs of program errors, compliance with applicable laws, damage to or loss of data, programs or equipment, and the unavailability or interruption of operation. This software is not intended to be used in any situation where a failure could cause risk of injury or damage to property. The software developed by NIST employees is not subject to copyright protection within the United States.
+*/
 
 #include <string.h>
 #include "rng.h"

diff --git a/ref/rng.h b/ref/rng.h
@@ -1,9 +1,13 @@
-//
-//  rng.h
-//
-//  Created by Bassham, Lawrence E (Fed) on 8/29/17.
-//  Copyright © 2017 Bassham, Lawrence E (Fed). All rights reserved.
-//
+/*
+ * SPDX-License-Identifier: NIST-Software
+ * Copyright: National Institute of Standards and Technology; The software developed by NIST employees is not subject to copyright protection within the United States.
+ *
+NIST-developed software is provided by NIST as a public service. You may use, copy, and distribute copies of the software in any medium, provided that you keep intact this entire notice. You may improve, modify, and create derivative works of the software or any portion of the software, and you may copy and distribute such modifications or works. Modified works should carry a notice stating that you changed the software and should note the date and nature of any such change. Please explicitly acknowledge the National Institute of Standards and Technology as the source of the software.
+
+NIST-developed software is expressly provided "AS IS." NIST MAKES NO WARRANTY OF ANY KIND, EXPRESS, IMPLIED, IN FACT, OR ARISING BY OPERATION OF LAW, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND DATA ACCURACY. NIST NEITHER REPRESENTS NOR WARRANTS THAT THE OPERATION OF THE SOFTWARE WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT ANY DEFECTS WILL BE CORRECTED. NIST DOES NOT WARRANT OR MAKE ANY REPRESENTATIONS REGARDING THE USE OF THE SOFTWARE OR THE RESULTS THEREOF, INCLUDING BUT NOT LIMITED TO THE CORRECTNESS, ACCURACY, RELIABILITY, OR USEFULNESS OF THE SOFTWARE.
+
+You are solely responsible for determining the appropriateness of using and distributing the software and you assume all risks associated with its use, including but not limited to the risks and costs of program errors, compliance with applicable laws, damage to or loss of data, programs or equipment, and the unavailability or interruption of operation. This software is not intended to be used in any situation where a failure could cause risk of injury or damage to property. The software developed by NIST employees is not subject to copyright protection within the United States.
+*/
 
 #ifndef rng_h
 #define rng_h

diff --git a/ref/sha2.c b/ref/sha2.c
@@ -1,3 +1,7 @@
+/* SPDX-License-Identifier: (LicenseRef-SPHINCS-PLUS-Public-Domain OR CC0-1.0 OR 0BSD OR MIT-0) AND MIT
+ * Copyright: TBD
+ * */
+
 /* Based on the public domain implementation in
  * crypto_hash/sha512/ref/ from http://bench.cr.yp.to/supercop.html
  * by D. J. Bernstein */