mx.crypto bundles the following Rust crates as static dependencies.
Each crate retains its original license; this file lists the upstream
authors. The full text of each license is preserved in the vendored
source under src/rust/vendor.tar.xz.

# Primary dependency

vodozemac
  Copyright (c) The Matrix.org Foundation C.I.C.
  License: Apache-2.0
  https://github.com/matrix-org/vodozemac

# Cargo-framework (R-Rust bridge)

roxido, roxido_macro, rbindings
  Copyright (c) David B. Dahl
  License: MIT OR Apache-2.0
  https://github.com/dbdahl/cargo-framework

# Transitive crates

Attachment encryption also directly uses the RustCrypto aes, ctr, and sha2
crates (MIT OR Apache-2.0), rand (MIT OR Apache-2.0), and base64
(MIT OR Apache-2.0). Their authors and license texts are retained in the
vendored source.

The vendored crate set under src/rust/vendor.tar.xz is generated by
`cargo vendor` and includes the transitive dependencies of
`vodozemac` and `roxido`. Each crate's LICENSE / COPYING file is
preserved in its vendored directory. Crate authors are listed in
their respective Cargo.toml `authors` fields.