fix: streamline schema

Signed-off-by: Jan Kowalleck <[email protected]>

Author: jkowalleck

schema/bom-1.7.proto

@@ -2195,8 +2195,12 @@ message CryptoProperties {
     optional string algorithmFamily = 2;
     // An identifier for the parameter set of the cryptographic algorithm. Examples: in AES128, '128' identifies the key length in bits, in SHA256, '256' identifies the digest length, '128' in SHAKE128 identifies its maximum security level in bits, and 'SHA2-128s' identifies a parameter set used in SLH-DSA (FIPS205).
     optional string parameterSetIdentifier = 3;
-    // The specific underlying Elliptic Curve (EC) definition employed which is an indicator of the level of security strength, performance and complexity. Absent an authoritative source of curve names, CycloneDX recommends use of curve names as defined at [https://neuromancer.sk/std/](https://neuromancer.sk/std/), the source from which can be found at [https://github.com/J08nY/std-curves](https://github.com/J08nY/std-curves).
+    // [DEPRECATED] The specific underlying Elliptic Curve (EC) definition employed which is an indicator of the level of security strength, performance and complexity. Absent an authoritative source of curve names, CycloneDX recommends use of curve names as defined at [https://neuromancer.sk/std/](https://neuromancer.sk/std/), the source from which can be found at [https://github.com/J08nY/std-curves](https://github.com/J08nY/std-curves).
     optional string curve = 4;
+    // The specific underlying Elliptic Curve (EC) definition employed which is an indicator
+    // of the level of security strength, performance and complexity. Curves are defined in
+    // the cryptography-defs.json subschema. A corresponding schema for ProtoBuf is not available.
+    optional string ellipticCurve = 13;
     // The target and execution environment in which the algorithm is implemented in.
     optional CryptoExecutionEnvironment executionEnvironment = 5;
     // The target platform for which the algorithm is implemented. The implementation can be 'generic', running on any platform or for a specific platform.