-
-
Notifications
You must be signed in to change notification settings - Fork 83
Labels
cap: cryptographyCapability: Cryptography (CBOM)Capability: Cryptography (CBOM)
Description
Describe the defect
Where:
schema/cryptography-defs.json
What:
The AES algorithm family includes AEAD variants (e.g., GCM, CCM), but the registry is missing the standardized misuse-resistant AEAD mode AES-GCM-SIV (RFC 8452).
Impact:
Registry consumers cannot consistently identify or normalize AES-GCM-SIV usage across CBOM/SBOM pipelines, which affects reporting and policy enforcement.
Additional context
Registry-only completeness fix: add AES-GCM-SIV as an ae variant under the existing AES family. No schema or specification behavior changes.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
cap: cryptographyCapability: Cryptography (CBOM)Capability: Cryptography (CBOM)