# Usage of this project

**Read this before running, forking, or deploying anything from this repository.**

This is an **educational / research** implementation of parts of the
SECDSA EUDI-wallet design (Annex D protocols and Annex F monitoring).
It is **not** a production wallet, **not** certified, and **not** a patent license.

## What you may do

Under the [Apache License 2.0](LICENSE) **for the copyright in this code**, you may:

- Study the cryptography and the software-WSCA / monitoring insight
- Run the local lab UI and CLI demo on your own machines
- Fork, modify, and redistribute the *source code* under Apache-2.0
- Cite the paper and this repository in academic or engineering write-ups
- Experiment with SoftHSM / PKCS#11 wiring as a learning exercise

## What this project does **not** grant

Publishing or using this code does **not** give you rights under **SECDSA patents**
(or related patents). The specification paper remarks that SECDSA is subject to
patents. See [NOTICE](NOTICE).

In particular, **do not** treat this repository as permission to:

- Ship a production EUDI / identity wallet based on SECDSA
- Operate a commercial wallet-provider WSCA service using SECDSA
- Claim eIDAS, FIPS, Common Criteria, or similar compliance
- Claim that “it’s open source, so patents don’t apply”
- Remove or weaken the patent / non-production notices when redistributing

## Intended audience

Cryptographers, wallet engineers, and students who want a **hands-on lab** for:

1. Protocol 4 + Algorithms 36–38 (issue, instruct, verify)
2. Annex F Algorithms 39–40 (detect WSCA compromise without trusting the WSCA)
3. SoftHSM as a stand-in WSCD

## If you need production or commercial use

1. Talk to **qualified intellectual-property counsel**
2. Contact the **SECDSA patent rights holders** about a license
3. Only then design a production system (real HSM, ops, certification, …)

Until then, keep usage in the **lab / research** lane.

## Disclaimer

THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND. See LICENSE.
No warranty of non-infringement is given. You assume all risk arising from
use of patented techniques.

This document is **not legal advice**.