{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fcd91b0f-62db-4bd3-a2de-dae4088fc6c9",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-12T08:29:14Z",
    "tools": {
      "services": [
        {
          "provider": {
            "name": "PQCA"
          },
          "name": "CBOMkit"
        }
      ]
    },
    "properties": [
      {
        "name": "gitUrl",
        "value": "file:///repos/cryptography"
      },
      {
        "name": "revision",
        "value": "cbomkit-pin"
      },
      {
        "name": "commit",
        "value": "d45b793"
      }
    ]
  },
  "components": [
    {
      "type": "cryptographic-asset",
      "bom-ref": "d0289b12-b336-4c4f-9581-dd9e79437e4a",
      "name": "private-key@d0289b12-b336-4c4f-9581-dd9e79437e4a",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 347,
            "offset": 24,
            "additionalContext": "java.security.KeyFactory#getInstance(Ljava/lang/String;)Ljava/security/KeyFactory;"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "private-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "15607a60-30fc-42fa-a6d0-f3245caf5679",
      "name": "RSA-OAEP",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 265,
            "offset": 21,
            "additionalContext": "javax.crypto.Cipher#getInstance(Ljava/lang/String;Ljava/lang/String;)Ljavax/crypto/Cipher;"
          },
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 269,
            "offset": 21,
            "additionalContext": "javax.crypto.Cipher#getInstance(Ljava/lang/String;Ljava/lang/String;)Ljavax/crypto/Cipher;"
          },
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 273,
            "offset": 21,
            "additionalContext": "javax.crypto.Cipher#getInstance(Ljava/lang/String;Ljava/lang/String;)Ljavax/crypto/Cipher;"
          },
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 277,
            "offset": 21,
            "additionalContext": "javax.crypto.Cipher#getInstance(Ljava/lang/String;Ljava/lang/String;)Ljavax/crypto/Cipher;"
          },
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 281,
            "offset": 21,
            "additionalContext": "javax.crypto.Cipher#getInstance(Ljava/lang/String;Ljava/lang/String;)Ljavax/crypto/Cipher;"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "pke",
          "parameterSetIdentifier": "2048",
          "mode": "ecb",
          "padding": "oaep"
        },
        "oid": "1.2.840.113549.1.1.7"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "a1be6b53-429d-4c76-8a58-745a2ee128c4",
      "name": "RSA-2048",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java",
            "line": 347,
            "offset": 24,
            "additionalContext": "java.security.KeyFactory#getInstance(Ljava/lang/String;)Ljava/security/KeyFactory;"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "pke",
          "parameterSetIdentifier": "2048",
          "cryptoFunctions": [
            "keygen"
          ]
        },
        "oid": "1.2.840.113549.1.1.1"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "dc96893d-9fc5-4d6b-9941-5055b2f2290c",
      "name": "RSA",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 53,
            "offset": 20,
            "additionalContext": "RSAPrivateNumbers"
          },
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 60,
            "offset": 27,
            "additionalContext": "RSAPublicNumbers"
          },
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 317,
            "offset": 25,
            "additionalContext": "RSAPublicNumbers"
          },
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 336,
            "offset": 25,
            "additionalContext": "RSAPublicNumbers"
          },
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 337,
            "offset": 26,
            "additionalContext": "RSAPrivateNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "pke",
          "cryptoFunctions": [
            "decrypt",
            "keygen"
          ]
        },
        "oid": "1.2.840.113549.1.1.1"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "a7e9ac4f-c18a-488d-9a43-9f306a02305d",
      "name": "RC4",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/arc4/generate_arc4.py",
            "line": 63,
            "offset": 21,
            "additionalContext": "Cipher"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "stream-cipher",
          "cryptoFunctions": [
            "encrypt"
          ]
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "43229616-3a13-4816-9111-6aa8a19dafca",
      "name": "private-key@43229616-3a13-4816-9111-6aa8a19dafca",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 53,
            "offset": 20,
            "additionalContext": "RSAPrivateNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "private-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "1013d967-4895-4fa2-a043-09566bd26839",
      "name": "FFDH",
      "evidence": {
        "occurrences": [
          {
            "location": "src/cryptography/hazmat/primitives/asymmetric/dsa.py",
            "line": 185,
            "offset": 11,
            "additionalContext": "generate_private_key"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "pke",
          "cryptoFunctions": [
            "keygen"
          ]
        },
        "oid": "1.2.840.113549.1.3.1"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "1931250b-32f9-4cf0-b55d-11a223952a27",
      "name": "HKDF-SHA-256",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/hkdf/generate_hkdf.py",
            "line": 12,
            "offset": 6,
            "additionalContext": "HKDF"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "kdf",
          "parameterSetIdentifier": "9600",
          "cryptoFunctions": [
            "keyderive"
          ]
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "ac461a13-343e-4ea9-9929-c42159f9bee0",
      "name": "public-key@ac461a13-343e-4ea9-9929-c42159f9bee0",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 60,
            "offset": 27,
            "additionalContext": "RSAPublicNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "public-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "83b66e23-87bb-437b-8805-d755287f20b5",
      "name": "private-key@83b66e23-87bb-437b-8805-d755287f20b5",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 25,
            "offset": 15,
            "additionalContext": "generate_private_key"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "private-key",
          "size": 2048
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "404396f0-7eb5-4e99-8c61-24c2815c05a2",
      "name": "RSA-2048",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py",
            "line": 25,
            "offset": 15,
            "additionalContext": "generate_private_key"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "pke",
          "parameterSetIdentifier": "2048",
          "cryptoFunctions": [
            "decrypt",
            "keygen"
          ]
        },
        "oid": "1.2.840.113549.1.1.1"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "d5ac8281-c09b-4ce7-8a9c-c5e9c90e4d5c",
      "name": "private-key@d5ac8281-c09b-4ce7-8a9c-c5e9c90e4d5c",
      "evidence": {
        "occurrences": [
          {
            "location": "src/cryptography/hazmat/primitives/asymmetric/dsa.py",
            "line": 185,
            "offset": 11,
            "additionalContext": "generate_private_key"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "private-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "5e8afa19-4028-43de-9165-c6f78299cfbd",
      "name": "SHA-256",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/hkdf/generate_hkdf.py",
            "line": 12,
            "offset": 6,
            "additionalContext": "HKDF"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "hash",
          "parameterSetIdentifier": "256",
          "cryptoFunctions": [
            "digest"
          ]
        },
        "oid": "2.16.840.1.101.3.4.2.1"
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "271871b9-bd9e-40da-b730-7df777b76f22",
      "name": "public-key@271871b9-bd9e-40da-b730-7df777b76f22",
      "evidence": {
        "occurrences": [
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 317,
            "offset": 25,
            "additionalContext": "RSAPublicNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "public-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "5d5ac98c-d158-4440-bd2f-857b20a699fc",
      "name": "public-key@5d5ac98c-d158-4440-bd2f-857b20a699fc",
      "evidence": {
        "occurrences": [
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 336,
            "offset": 25,
            "additionalContext": "RSAPublicNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "public-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "288a9324-964f-4815-a0bf-80c75985fb04",
      "name": "private-key@288a9324-964f-4815-a0bf-80c75985fb04",
      "evidence": {
        "occurrences": [
          {
            "location": "src/cryptography/hazmat/primitives/serialization/ssh.py",
            "line": 337,
            "offset": 26,
            "additionalContext": "RSAPrivateNumbers"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "type": "private-key"
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "ffda8cb5-82c9-477f-9afc-6242f46f472b",
      "name": "RC4",
      "evidence": {
        "occurrences": [
          {
            "location": "docs/development/custom-vectors/arc4/verify_arc4.go",
            "line": 43,
            "offset": 16,
            "additionalContext": "NewCipher"
          }
        ]
      },
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "stream-cipher"
        }
      }
    }
  ],
  "dependencies": [
    {
      "ref": "d0289b12-b336-4c4f-9581-dd9e79437e4a",
      "dependsOn": [
        "a1be6b53-429d-4c76-8a58-745a2ee128c4"
      ]
    },
    {
      "ref": "1931250b-32f9-4cf0-b55d-11a223952a27",
      "dependsOn": [
        "5e8afa19-4028-43de-9165-c6f78299cfbd"
      ]
    },
    {
      "ref": "83b66e23-87bb-437b-8805-d755287f20b5",
      "dependsOn": [
        "404396f0-7eb5-4e99-8c61-24c2815c05a2"
      ]
    },
    {
      "ref": "43229616-3a13-4816-9111-6aa8a19dafca",
      "dependsOn": [
        "dc96893d-9fc5-4d6b-9941-5055b2f2290c"
      ]
    },
    {
      "ref": "271871b9-bd9e-40da-b730-7df777b76f22",
      "dependsOn": [
        "dc96893d-9fc5-4d6b-9941-5055b2f2290c"
      ]
    },
    {
      "ref": "5d5ac98c-d158-4440-bd2f-857b20a699fc",
      "dependsOn": [
        "dc96893d-9fc5-4d6b-9941-5055b2f2290c"
      ]
    },
    {
      "ref": "ac461a13-343e-4ea9-9929-c42159f9bee0",
      "dependsOn": [
        "dc96893d-9fc5-4d6b-9941-5055b2f2290c"
      ]
    },
    {
      "ref": "d5ac8281-c09b-4ce7-8a9c-c5e9c90e4d5c",
      "dependsOn": [
        "1013d967-4895-4fa2-a043-09566bd26839"
      ]
    },
    {
      "ref": "288a9324-964f-4815-a0bf-80c75985fb04",
      "dependsOn": [
        "dc96893d-9fc5-4d6b-9941-5055b2f2290c"
      ]
    }
  ]
}