Cryptographic Bill of Materials (CBOM)

What Is a Cryptographic Bill of Materials (CBOM)?

A Cryptographic Bill of Materials (CBOM) is an inventory of the cryptographic elements inside software and firmware — algorithms, key sizes, certificates, and other crypto artifacts — used to assess post-quantum readiness, identify weak or expired crypto, and plan modernization.

As quantum computing approaches practical relevance, organizations need to know exactly where quantum-vulnerable algorithms live in their deployed software. A CBOM provides that inventory in a machine-readable, standardized form. NetRise Turbine produces CBOM exports aligned to CycloneDX 1.6 with algorithm identifiers, key sizes, and technical hashes — supporting PQC readiness reporting and integration into broader compliance workflows.

Related Terms

Post-Quantum Cryptography · Harvest Now, Decrypt Later · Software Bill of Materials · CycloneDX