CycloneDX / CycloneDX/specification
[Defect]: Missing definition of length variable for CMAC and DSA algorithm family in Cryptography registry
Open
cap: cryptography-registry
defect
- Dominant language
- XSLT
- Stars
- 547
- Forks
- 93
- Avg merge
- 7h 11m
- Merged PRs (30d)
- 37
Description
## Describe the defect
The variants for CMAC and DSA in schema/cryptography-defs.json have {length} variable but definition of this variable is missing. Expecting clear definition like keyLength, tagLength, etc.
CMAC: CMAC[-{cipherAlgorithm}][-{length}]
DSA: DSA[-{length}][-{hash}]
## Additional context
Both issues are data-quality / naming defects in the Cryptography Registry and can be fixed without changing schema behavior or introducing new algorithms.
Contributor guide
Assessment
This issue has not been assessed yet.