Skip to content

chore: update algorithm families - #893

Closed
github-actions[bot] wants to merge 316 commits into
masterfrom
update-algorithm-families
Closed

github-actions[bot] wants to merge 316 commits into
masterfrom
update-algorithm-families

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

This PR updates schema/cryptography-defs.schema.json with the latest algorithm families generated from schema/cryptography-defs.json.

github-actions Bot and others added 30 commits December 2, 2025 04:04
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
…ling

Signed-off-by: Steve Springett <steve@springett.us>

# Conflicts:
#	schema/2.0/model/cyclonedx-common-2.0.schema.json
Signed-off-by: Steve Springett <steve@springett.us>
…tras-suggestions

Signed-off-by: Steve Springett <steve@springett.us>
Issue: 
As discussed in ticket #731 , this PR is a review of the schema

Model schema reviewed to ensure no data loss
Risk schema changes done based on risk and compliance tooling taxonomies
to ensure compatibility (including data classification etc)

This PR is to use for discussion on the TM-BOM discussion 0 not for
merging yet
Signed-off-by: Steve Springett <steve@springett.us>
. Blueprints working group will continue to iterate and validate.

Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Implement the following features for CBOM v2.0:

- Change implementationPlatform to array to support multiple platforms
- Add keyUsage property to cryptoProperties and relatedCryptoMaterialProperties
  (open string array with examples: CIPHER, SIGN, VERIFY, WRAP, UNWRAP, etc.)
- Add secProperties to algorithmProperties for security properties
  (open string array with examples: IND-CPA, IND-CCA, SUF-CMA, EUF-CMA, etc.)
- Extend evidence/occurrences with system metadata: accountInfo, systemOwner
- Extend evidence/occurrences with process metadata: startTime, endTime, usageCount
- Change securedBy.algorithmRef to array of refs to support linking multiple
  securing assets (algorithms, hardware, keys, etc.)

Extend cryptoProperties.mode/padding/cryptoFunctions

Signed-off-by: Basil Hess <bhe@zurich.ibm.com>
Signed-off-by: Basil Hess <bhe@zurich.ibm.com>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
jkowalleck and others added 6 commits August 27, 2026 13:45
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@github-actions
github-actions Bot force-pushed the update-algorithm-families branch from 6201f2b to 92b5d4c Compare August 27, 2026 16:54
…ine (#1060)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@github-actions
github-actions Bot force-pushed the update-algorithm-families branch from 92b5d4c to ff36486 Compare August 27, 2026 16:56
jkowalleck and others added 5 commits August 27, 2026 19:05
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@github-actions
github-actions Bot force-pushed the update-algorithm-families branch from ff36486 to 134744c Compare August 28, 2026 12:55
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@jkowalleck
jkowalleck marked this pull request as draft August 28, 2026 15:22
@jkowalleck

Copy link
Copy Markdown
Member

puttin this into draft mode, since it appears to have a lot of CDX 2.0 changes in there...

jkowalleck and others added 5 commits August 31, 2026 13:23
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@github-actions
github-actions Bot force-pushed the update-algorithm-families branch from 134744c to 833cb53 Compare August 31, 2026 16:07
@github-actions
github-actions Bot force-pushed the update-algorithm-families branch from 833cb53 to 23e1cfc Compare August 31, 2026 16:08
@jkowalleck

jkowalleck commented Sep 1, 2026 •

Copy link
Copy Markdown
Member

closing. the PR is cone rogue due to a missing branch-constriant in the according generator workflow.
see the fix: 2a6e7e1

@jkowalleck jkowalleck closed this Sep 1, 2026
@jkowalleck
jkowalleck deleted the update-algorithm-families branch September 1, 2026 14:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants