Supporting PQC migration and cryptographic agility with automated CBOM generation
Authors
Date
2024Copyright
© The Author(s)
The technological development of quantum computers has advanced dramatically in recent years as organizations and governments seek to take advantage of the increasing computing power of quantum computers. Although quantum computers have the potential to benefit people and economies in many areas, they also threaten the security of modern cryptography, especially the widely used public key cryptography such as RSA, DH, ECC, and DSA. Since these algorithms will be completely broken in the future, quantum-safe alternatives are being developed and researched to mitigate the threat. History has shown that replacing cryptographic algorithms is a long and difficult process, and given the complexity of modern information systems, automated tools are needed to support post-quantum cryptography migration and cryptographic agility. In this research, an automated Cryptography Bill of Materials (CBOM) generator was built as a solution to this need and it's feasibility was analyzed. Design science principles were used to guide the research process, as well as the building and evaluation of the created artifact. The main result of the research is an artifact capable of generating CBOMs by scanning cryptographic algorithms from JavaScript source files that implement the Node.js Crypto module. In addition, the research proved that an automated CBOM tool based on regular expression searches is a feasible and accurate solution for capturing cryptographic components.
...
Metadata
Show full item recordCollections
- Pro gradu -tutkielmat [29626]
License
Related items
Showing items with similar title or keywords.
-
A Next‐Generation Air‐Stable Palladium(I) Dimer Enables Olefin Migration and Selective C−C Coupling in Air
Kundu, Gourab; Sperger, Theresa; Rissanen, Kari; Schoenebeck, Franziska (Wiley-VCH Verlag, 2020)We report a new air‐stable PdI dimer, [Pd(μ‐I)(PCy2tBu)]2, which triggers E‐selective olefin migration to enamides and styrene derivatives in the presence of multiple functional groups and with complete tolerance of air. ... -
Distributed Leadership Collaboration Factors to Support Idea Generation In Computer-Supported Collaborative e-Learning
Lambropoulos, Niki; Bakharia, Aneesha; Gourdin, Alain (University of Jyväskylä, Agora Center, 2011)This paper aims to identify, discuss and analyze students’ collaboration factors related to distributed leadership (DL), which correlates with interaction quality evident in idea generation. Scripting computer-supported ... -
Applying Semiautomatic Generation of Conceptual Models to Decision Support Systems Domain
Nurminen, Miika; Suominen, Panu; Äyrämö, Sami; Kärkkäinen, Tommi (ACTA Press, 2009)This paper presents a decision support system specification in the form of business use cases and a stereotyped conceptual model based on the specification. The use cases are based on generic user requirements and address ... -
Carbons from second generation biomass as sustainable supports for catalytic systems
Prati, Laura; Bergna, Davide; Villa, Alberto; Spontoni, Paolo; Bianchi, Claudia L.; Hu, Tao; Romar, Henrik; Lassi, Ulla (Elsevier B.V., 2018)In this study activated carbons were produced from the wood of three different wood species (pine, birch, spruce). The resulting activated carbons were characterized in bulk for ash content, carbon content (elemental ... -
Migration of the highly educated: Evidence from residence spells of university graduates
Haapanen, Mika; Tervo, Hannu (Wiley-Blackwell, 2012)We examine the inter-regional migration of university graduates from 1991 to 2003 in Finland. The results show that time matters: two-years before and during the graduation year the hazard rates of migration increase, and ...