Skip to content

[WIP ] v1.7 - Cryptography WG #615

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 19 commits into from
Closed

[WIP ] v1.7 - Cryptography WG #615

wants to merge 19 commits into from

Conversation

n1ckl0sk0rtge
Copy link

2024-10-17

  • add serial number to certificateProperties
  • add fingerPrint to certificateProperties and relatedCryptoMaterialProperties

TODO/DONE

  • JSON schema modified
  • XML schema modified
  • ProtoBuf schema modified
  • JSON examples/test data crafted
  • XML examples/test data crafted
  • ProtoBuf examples/test data crafted

@n1ckl0sk0rtge
add certificate extensions, rename certificateExtensions to certifica…
1656690 
…teFileExtensions, fix relatedCryptographicAssets, add reason for certificate lifecycle

Signed-off-by: Nicklas Körtge <[email protected]>
jkowalleck
jkowalleck reviewed Mar 21, 2025
View reviewed changes
schema/bom-1.7.schema.json
"value": {
"type": "string",
"title": "Value",
"description": "The description of the custom certificate extension."
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
"description": "The description of the custom certificate extension."
"description": "The value of the custom certificate extension."

#543 (comment)

@jkowalleck jkowalleck added this to the 1.7 milestone Mar 21, 2025
stevespringett and others added 13 commits March 21, 2025 22:07
@stevespringett
Initial checkin of algorithm family support.
76745f2 
Signed-off-by: Steve Springett <[email protected]>
@bhess
Extending the ikev2TransformTypes property
02d4ff0 
Signed-off-by: Basil Hess <[email protected]>
@n1ckl0sk0rtge
Merge pull request #1 from bhess/1.7-dev-cryptography
4bee78c 
Extending the ikev2TransformTypes property
@bhess
Revert "Extending the ikev2TransformTypes property"
dd16654 
This reverts commit 02d4ff0.
@bhess
Extending the ikev2TransformTypes property (1.7)
3b61bcd 
Signed-off-by: Basil Hess <[email protected]>
@n1ckl0sk0rtge
Merge pull request #2 from bhess/1.7-dev-cryptography
cb7f83e 
Ikev2 transform types extension (2)
@GeroDittmann
IKE: individual algorithms instead of arrays
b90d54e
@bhess
Update cryptography-defs.json
5b8fff6 
- Adds a few more algorithm
- Converts urls to standards to doi links, where available.
- Checks if urls work

Signed-off-by: Basil Hess <[email protected]>
@jkowalleck
Merge branch '1.7-dev' into 1.7-dev-cryptography
391aec5
@jkowalleck
Merge branch '1.7-dev-cryptography' into patch-1
7c731a5
@bhess
Add more algorithms, used by SSLv3, TLS1.0-1.3
643fca9 
Signed-off-by: Basil Hess <[email protected]>
@stevespringett
Update cryptography-defs.json (CycloneDX#622)
761903f 
- Adds a few more algorithm
- Converts urls to standards to doi links, where available.
- Checks if urls work

----

TODO / progress
- [x] JSON schema
- [ ] XML schema
- [ ] ProtoBugf schema

<!-- 
Thank you for taking the time to develop and contribute a core
enhancement or fix for a defect!

We kindly request that you create pull requests only for things that
have been discussed in a ticket first; exceptions may be made for
spelling or grammar fixes.
Read more about the process here:
https://cyclonedx.org/participate/standardization-process/#working-model

Please have the related ticket/issue ID ready. 
If there is none, feel free to create a new ticket:
https://github.com/CycloneDX/specification/issues/new/choose

-->

<!-- 

Please provide a brief description of what this pull request intends to
do and which ticket it fixes/closes.
Example: 
> As discussed in ticket CycloneDX#485, this PR adds Streebog to the hash
algorithm enum.
>
> fixes CycloneDX#485 

In case this is for a spelling or grammar improvement, please provide a
brief description.
Example:
> Fixe typo: color(AE) -> colour(BE)

-->
@n1ckl0sk0rtge
Merge pull request #3 from GeroDittmann/ike-no-arrays
723c957 
IKE transform types: Only one algorithm per parameter
@jkowalleck jkowalleck self-requested a review April 18, 2025 08:00
bhess and others added 5 commits May 14, 2025 12:59
@bhess
Revise variants structure
9f243b0 
Signed-off-by: Basil Hess <[email protected]>
@bhess
- Extends cryptography-defs list by Algorithms from PKCS11
d376ff5 
- Changes schma for crypto-defs to allow different variant patterns corresponding to different primitives
- Adds "key-wrap" as a new primitive

Signed-off-by: Basil Hess <[email protected]>
@bhess
Add missing closing bracket
b05ba4d 
Signed-off-by: Basil Hess <[email protected]>
@stevespringett
Extends cryptography-defs.json (CycloneDX#644)
4e9ef89 
- Extends cryptography-defs.json list with algorithms from PKCS11
- Changes schma for crypto-defs to allow different variant patterns
corresponding to different primitives
- Adds "key-wrap" as a new primitive
@n1ckl0sk0rtge
Merge branch 'CycloneDX:1.7-dev-cryptography' into 1.7-dev-cryptography
49abb61
@n1ckl0sk0rtge n1ckl0sk0rtge deleted the 1.7-dev-cryptography branch May 22, 2025 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jkowalleck jkowalleck Awaiting requested review from jkowalleck

Assignees
No one assigned
Labels
proposed core enhancement
Projects
None yet
Milestone
1.7
Development

Successfully merging this pull request may close these issues.
5 participants
@n1ckl0sk0rtge @jkowalleck @stevespringett @bhess @GeroDittmann