Skip to content

chore: update algorithm families - #893

Draft
github-actions[bot] wants to merge 318 commits into
masterfrom
update-algorithm-families
Draft

chore: update algorithm families#893
github-actions[bot] wants to merge 318 commits into
masterfrom
update-algorithm-families

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

This PR updates schema/cryptography-defs.schema.json with the latest algorithm families generated from schema/cryptography-defs.json.

github-actions Bot and others added 30 commits December 2, 2025 04:05
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
…ling

Signed-off-by: Steve Springett <steve@springett.us>

# Conflicts:
#	schema/2.0/model/cyclonedx-common-2.0.schema.json
Signed-off-by: Steve Springett <steve@springett.us>
…tras-suggestions

Signed-off-by: Steve Springett <steve@springett.us>
Issue: 
As discussed in ticket #731 , this PR is a review of the schema

Model schema reviewed to ensure no data loss
Risk schema changes done based on risk and compliance tooling taxonomies
to ensure compatibility (including data classification etc)

This PR is to use for discussion on the TM-BOM discussion 0 not for
merging yet
Signed-off-by: Steve Springett <steve@springett.us>
. Blueprints working group will continue to iterate and validate.

Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Implement the following features for CBOM v2.0:

- Change implementationPlatform to array to support multiple platforms
- Add keyUsage property to cryptoProperties and relatedCryptoMaterialProperties
  (open string array with examples: CIPHER, SIGN, VERIFY, WRAP, UNWRAP, etc.)
- Add secProperties to algorithmProperties for security properties
  (open string array with examples: IND-CPA, IND-CCA, SUF-CMA, EUF-CMA, etc.)
- Extend evidence/occurrences with system metadata: accountInfo, systemOwner
- Extend evidence/occurrences with process metadata: startTime, endTime, usageCount
- Change securedBy.algorithmRef to array of refs to support linking multiple
  securing assets (algorithms, hardware, keys, etc.)

Extend cryptoProperties.mode/padding/cryptoFunctions

Signed-off-by: Basil Hess <bhe@zurich.ibm.com>
Signed-off-by: Basil Hess <bhe@zurich.ibm.com>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Basil Hess <bhe@zurich.ibm.com>
jkowalleck and others added 17 commits August 25, 2026 15:34
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@github-actions
github-actions Bot force-pushed the update-algorithm-families branch from 6201f2b to 92b5d4c Compare August 27, 2026 16:54
…ine (#1060)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@github-actions
github-actions Bot force-pushed the update-algorithm-families branch from 92b5d4c to ff36486 Compare August 27, 2026 16:56
jkowalleck and others added 7 commits August 27, 2026 19:05
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@github-actions
github-actions Bot force-pushed the update-algorithm-families branch from ff36486 to 134744c Compare August 28, 2026 12:55
@jkowalleck
jkowalleck marked this pull request as draft August 28, 2026 15:22
@jkowalleck

Copy link
Copy Markdown
Member

puttin this into draft mode, since it appears to have a lot of CDX 2.0 changes in there...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants