-
-
Notifications
You must be signed in to change notification settings - Fork 80
Open
Milestone
Description
This issue is to collect features useful for the next version of CBOM:
- cryptoProperties/algorithmProperties/implementationPlatform should be an array to allow selecting multiple platforms
- cryptoProperties/relatedCryptoMaterialProperties: adding properties that captures the permitted keyUsage (e.g., CIPHER, SIGN)
- evidence/occurrences: adding properties to capture system information (e.g., accountInfo, systemOwner)
- evidence/occurrences: adding properties to capture the process (e.g., startTime, endTime, usageCount)
- cryptoProperties/algorithmProperties/secProperties to describe the security property of an algorithm (e.g., IND-CPA)
- cryptoProperties/relatedCryptographicAssetProperties/securedBy/algorithmRef should be an array of "refs", to be able to link to algorithms, hardware, keys, etc. securing the asset
- capturing the securityGoal (will likely be captured by behaviors/intents)