{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:18a4d200-4e43-4f1c-8524-b17076f89469",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-12T08:17:39Z",
    "tools": {
      "services": [
        {
          "provider": {
            "name": "PQCA"
          },
          "name": "CBOMkit"
        }
      ]
    },
    "properties": [
      {
        "name": "gitUrl",
        "value": "file:///repos/cryptography"
      },
      {
        "name": "revision",
        "value": "cbomkit-pin"
      },
      {
        "name": "commit",
        "value": "d45b793"
      }
    ]
  },
  "components": [
    {
      "type": "cryptographic-asset",
      "bom-ref": "b5ab6515-d634-4646-9874-e65b0280d6ef",
      "name": "RSA-OAEP",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 265,
            "offset": 21,
            "additionalContext": "javax.crypto.Cipher#getInstance(Ljava/lang/String;Ljava/lang/String;)Ljavax/crypto/Cipher;"
          },
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 269,
            "offset": 21,
            "additionalContext": "javax.crypto.Cipher#getInstance(Ljava/lang/String;Ljava/lang/String;)Ljavax/crypto/Cipher;"
          },
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 273,
            "offset": 21,
            "additionalContext": "javax.crypto.Cipher#getInstance(Ljava/lang/String;Ljava/lang/String;)Ljavax/crypto/Cipher;"
          },
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 277,
            "offset": 21,
            "additionalContext": "javax.crypto.Cipher#getInstance(Ljava/lang/String;Ljava/lang/String;)Ljavax/crypto/Cipher;"
          },
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 281,
            "offset": 21,
            "additionalContext": "javax.crypto.Cipher#getInstance(Ljava/lang/String;Ljava/lang/String;)Ljavax/crypto/Cipher;"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "pke",
          "parameterSetIdentifier": "2048",
          "mode": "ecb",
          "padding": "oaep"
        },
        "oid": "1.2.840.113549.1.1.7"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "b6ccc2e2-c9f9-4c7a-99bf-c0e09c8f30b1",
      "name": "private-key@b6ccc2e2-c9f9-4c7a-99bf-c0e09c8f30b1",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 347,
            "offset": 24,
            "additionalContext": "java.security.KeyFactory#getInstance(Ljava/lang/String;)Ljava/security/KeyFactory;"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "private-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "e4b72f17-93d2-4165-960c-2788f7726c30",
      "name": "RSA-2048",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 347,
            "offset": 24,
            "additionalContext": "java.security.KeyFactory#getInstance(Ljava/lang/String;)Ljava/security/KeyFactory;"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "pke",
          "parameterSetIdentifier": "2048",
          "cryptoFunctions": [
            "keygen"
          ]
        },
        "oid": "1.2.840.113549.1.1.1"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "72d772c6-5ed2-4389-9177-1290520b2023",
      "name": "RSA",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 53,
            "offset": 20,
            "additionalContext": "RSAPrivateNumbers"
          },
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 60,
            "offset": 27,
            "additionalContext": "RSAPublicNumbers"
          },
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 317,
            "offset": 25,
            "additionalContext": "RSAPublicNumbers"
          },
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 336,
            "offset": 25,
            "additionalContext": "RSAPublicNumbers"
          },
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 337,
            "offset": 26,
            "additionalContext": "RSAPrivateNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "pke",
          "cryptoFunctions": [
            "decrypt",
            "keygen"
          ]
        },
        "oid": "1.2.840.113549.1.1.1"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "30b6d21c-3aae-4ca3-9613-875b30b8053f",
      "name": "RC4",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/arc4/generate_arc4.py",
            "line": 63,
            "offset": 21,
            "additionalContext": "Cipher"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "stream-cipher",
          "cryptoFunctions": [
            "encrypt"
          ]
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "6256bcc5-47b2-46cc-a8f0-e1663b28faae",
      "name": "FFDH",
      "evidence": {
        "occurrences": [
          {
            "location": "src/cryptography/hazmat/primitives/asymmetric/dsa.py",
            "line": 185,
            "offset": 11,
            "additionalContext": "generate_private_key"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "pke",
          "cryptoFunctions": [
            "keygen"
          ]
        },
        "oid": "1.2.840.113549.1.3.1"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "71145796-9d48-4db6-93e0-d61e696470fd",
      "name": "HKDF-SHA-256",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/hkdf/generate_hkdf.py",
            "line": 12,
            "offset": 6,
            "additionalContext": "HKDF"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "kdf",
          "parameterSetIdentifier": "9600",
          "cryptoFunctions": [
            "keyderive"
          ]
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "dc4b12a2-08a9-4a9b-b2cd-76829ac30a10",
      "name": "public-key@dc4b12a2-08a9-4a9b-b2cd-76829ac30a10",
      "evidence": {
        "occurrences": [
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 336,
            "offset": 25,
            "additionalContext": "RSAPublicNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "public-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "9d6f756c-4507-446e-b39b-ed2ec7376a1b",
      "name": "private-key@9d6f756c-4507-446e-b39b-ed2ec7376a1b",
      "evidence": {
        "occurrences": [
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 337,
            "offset": 26,
            "additionalContext": "RSAPrivateNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "private-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "209a6a20-b8c2-4789-b3b9-eef5d437ec71",
      "name": "RSA-2048",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 25,
            "offset": 15,
            "additionalContext": "generate_private_key"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "pke",
          "parameterSetIdentifier": "2048",
          "cryptoFunctions": [
            "decrypt",
            "keygen"
          ]
        },
        "oid": "1.2.840.113549.1.1.1"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "c247b666-df28-49ad-993e-878e29ad1dd2",
      "name": "private-key@c247b666-df28-49ad-993e-878e29ad1dd2",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 25,
            "offset": 15,
            "additionalContext": "generate_private_key"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "private-key",
          "size": 2048
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "ba1e4594-8007-4e9d-896c-b289e47952f2",
      "name": "private-key@ba1e4594-8007-4e9d-896c-b289e47952f2",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 53,
            "offset": 20,
            "additionalContext": "RSAPrivateNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "private-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "378cc5c0-8653-447f-9e0b-8e63dddc35f1",
      "name": "public-key@378cc5c0-8653-447f-9e0b-8e63dddc35f1",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 60,
            "offset": 27,
            "additionalContext": "RSAPublicNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "public-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "16436dbc-2173-4044-98e3-75fd18244e76",
      "name": "SHA-256",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/hkdf/generate_hkdf.py",
            "line": 12,
            "offset": 6,
            "additionalContext": "HKDF"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "hash",
          "parameterSetIdentifier": "256",
          "cryptoFunctions": [
            "digest"
          ]
        },
        "oid": "2.16.840.1.101.3.4.2.1"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "86db92d9-6ecb-4368-9a99-de1b4bf1d81c",
      "name": "public-key@86db92d9-6ecb-4368-9a99-de1b4bf1d81c",
      "evidence": {
        "occurrences": [
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 317,
            "offset": 25,
            "additionalContext": "RSAPublicNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "public-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "f5fb8fe6-3929-4064-b461-02026cfe0b67",
      "name": "private-key@f5fb8fe6-3929-4064-b461-02026cfe0b67",
      "evidence": {
        "occurrences": [
          {
            "location": "src/cryptography/hazmat/primitives/asymmetric/dsa.py",
            "line": 185,
            "offset": 11,
            "additionalContext": "generate_private_key"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "private-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "fa422c1b-bad7-4c45-8a3b-fe8e5dd3278d",
      "name": "RC4",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/arc4/verify_arc4.go",
            "line": 43,
            "offset": 16,
            "additionalContext": "NewCipher"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "stream-cipher"
        }
      }
    }
  ],
  "dependencies": [
    {
      "ref": "b6ccc2e2-c9f9-4c7a-99bf-c0e09c8f30b1",
      "dependsOn": [
        "e4b72f17-93d2-4165-960c-2788f7726c30"
      ]
    },
    {
      "ref": "ba1e4594-8007-4e9d-896c-b289e47952f2",
      "dependsOn": [
        "72d772c6-5ed2-4389-9177-1290520b2023"
      ]
    },
    {
      "ref": "f5fb8fe6-3929-4064-b461-02026cfe0b67",
      "dependsOn": [
        "6256bcc5-47b2-46cc-a8f0-e1663b28faae"
      ]
    },
    {
      "ref": "9d6f756c-4507-446e-b39b-ed2ec7376a1b",
      "dependsOn": [
        "72d772c6-5ed2-4389-9177-1290520b2023"
      ]
    },
    {
      "ref": "dc4b12a2-08a9-4a9b-b2cd-76829ac30a10",
      "dependsOn": [
        "72d772c6-5ed2-4389-9177-1290520b2023"
      ]
    },
    {
      "ref": "c247b666-df28-49ad-993e-878e29ad1dd2",
      "dependsOn": [
        "209a6a20-b8c2-4789-b3b9-eef5d437ec71"
      ]
    },
    {
      "ref": "86db92d9-6ecb-4368-9a99-de1b4bf1d81c",
      "dependsOn": [
        "72d772c6-5ed2-4389-9177-1290520b2023"
      ]
    },
    {
      "ref": "71145796-9d48-4db6-93e0-d61e696470fd",
      "dependsOn": [
        "16436dbc-2173-4044-98e3-75fd18244e76"
      ]
    },
    {
      "ref": "378cc5c0-8653-447f-9e0b-8e63dddc35f1",
      "dependsOn": [
        "72d772c6-5ed2-4389-9177-1290520b2023"
      ]
    }
  ]
}