This is cryptographic code which originated in the United States, and so is subject to export control.
I work for Cryptography Research, a division of Rambus. Opinions stated here are my own, and do not necessarily reflect CRI or Rambus policy.
This code is released under MIT license. Its copyright is owned by Cryptography Research, Inc, except for crandom, which is owned by Stanford University. There is no warranty, so use this code at your own risk. Or better yet, don't use it yet, because it's not done yet, and the API and output formats will probably change.
I am not aware of any patents which apply to this work, though the point compression patent is close enough that you might want to read it carefully. Likewise, I do not believe that the fixed-base comb patents apply to my comb, but I'm not a lawyer so don't take my word for it. I'm not planning to file patents on any of the novel components of this work, but I am contractually obligated to help Rambus do so if they want to. That said, most of the novel components are in my paper from 2012, so they are safe.