Skip to content

Features for CBOM for v2.0 #738

@bhess

Description

@bhess

This issue is to collect features useful for the next version of CBOM:

  • cryptoProperties/algorithmProperties/implementationPlatform should be an array to allow selecting multiple platforms
  • cryptoProperties/relatedCryptoMaterialProperties: adding properties that captures the permitted keyUsage (e.g., CIPHER, SIGN)
  • evidence/occurrences: adding properties to capture system information (e.g., accountInfo, systemOwner)
  • evidence/occurrences: adding properties to capture the process (e.g., startTime, endTime, usageCount)
  • cryptoProperties/algorithmProperties/secProperties to describe the security property of an algorithm (e.g., IND-CPA)
  • cryptoProperties/relatedCryptographicAssetProperties/securedBy/algorithmRef should be an array of "refs", to be able to link to algorithms, hardware, keys, etc. securing the asset
  • capturing the securityGoal (will likely be captured by behaviors/intents)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions