https://bugzilla.redhat.com/show_bug.cgi?id=2005536
--- Comment #8 from Fabio Valentini decathorpe@gmail.com --- Finally got an actionable response from Red Hat Legal after asking ** a third time **:
https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/...
The relevant part:
Ok, so ... I'm pretty sure we actually don't *need* the affected code. Would removing all p434 related code from the sources entirely (to be on the safe side), and building the package without support for this curve, be an acceptable solution until the legal status is cleared up?
Yes, that's an acceptable solution in the meantime.
All code related to p434 curve will need to removed from the upstream tarball and the Fedora package can only use a "cleaned" tarball.