CycloneDX / CycloneDX/specification

[Defect]: Missing definition of length variable for CMAC and DSA algorithm family in Cryptography registry

Open
#782 1 comment 0 reactions 0 assignees View on GitHub
cap: cryptography-registry defect
Dominant language
XSLT
Stars
547
Forks
93
Avg merge
7h 11m
Merged PRs (30d)
37

Description

## Describe the defect

The variants for CMAC and DSA in schema/cryptography-defs.json have {length} variable but definition of this variable is missing. Expecting clear definition like keyLength, tagLength, etc.

CMAC: CMAC[-{cipherAlgorithm}][-{length}]
DSA: DSA[-{length}][-{hash}]

## Additional context

Both issues are data-quality / naming defects in the Cryptography Registry and can be fixed without changing schema behavior or introducing new algorithms.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.