NOTICE

tinytalk
Copyright 2026 Aseem Chopra

Licensed under the Apache License, Version 2.0: see LICENSE.

Provenance
----------

The core protocol, the Zephyr port and the host tests were extracted from
ultrawidelock@d6e23761, where they are under the ISC license.

connectedhomeip test attestation credentials (Apache-2.0)
---------------------------------------------------------

src/matter_attest.c embeds data from connectedhomeip (Project CHIP),
https://github.com/project-chip/connectedhomeip, which is distributed under
the Apache License, Version 2.0 (the LICENSE file in this repository). Each
item below was compared byte for byte against src/credentials/examples/ in
that project:

  k_dac      Example Device Attestation Certificate, vendor 0xFFF1,
             product 0x8001: kDevelopmentDAC_Cert_FFF1_8001,
             ExampleDACs.cpp. 491 bytes, identical.
  k_pai      Example Product Attestation Intermediate certificate, vendor
             0xFFF1: kDevelopmentPAI_Cert_FFF1, ExamplePAI.cpp. 463 bytes,
             identical.
  k_cd       Example Certification Declaration, the vendor 0xFFF1 fallback
             of kCdForAllExamples, DeviceAttestationCredsExample.cpp.
             539 bytes, identical.
  k_dac_key  The DAC private key that matter_attest_ecdsa_sign() signs with.
             32 bytes, identical to kDevelopmentDAC_PrivateKey_FFF1_8001,
             ExampleDACs.cpp. It is the key that matches the DAC above: the
             DAC's subject public key is identical to
             kDevelopmentDAC_PublicKey_FFF1_8001, which connectedhomeip
             publishes as that private key's public half.

These are public test credentials. The private key is published, so anyone
can sign as this DAC. Every device built from this repository is an
uncertified test accessory, and a commissioner will say so.

connectedhomeip SPAKE2+ test vectors (Apache-2.0)
-------------------------------------------------

tests/host/test_spake2p_mbedtls.c copies the four test vectors in
connectedhomeip's src/crypto/tests/SPAKE2P_RFC_test_vectors.h
(draft-bar-cfrg-spake2plus-01), under the same Apache License, Version 2.0.