Method
CBOM Builder
Builds a manual cryptographic bill of materials draft with algorithms, operations, owners, evidence and migration candidates.
Field scoring contract
| Field | Type | Role | Direction | Scored |
|---|---|---|---|---|
| Asset or component | text | context | context | no |
| Cryptographic algorithm | text | context | context | no |
| Operation | select | risk_driver | higher_is_worse | yes |
| Protocol | text | context | context | no |
| Certificate/key location | text | context | context | no |
| Owner | text | context | context | no |
| Confidentiality lifetime | select | risk_driver | higher_is_worse | yes |
| Evidence source | select | mitigation_evidence | higher_is_better | yes |
| Migration candidate | select | risk_driver | higher_is_worse | yes |
Limits
- Preliminary output
- Human review required
- Not certification
- Risk/readiness separated where implemented
- Context text is not averaged into numeric scores.
- Outputs require source/evidence review before decisions.