Algorithms that might turn into candidates for SPDX

Source: CycloneDX

This is a list of 28 algorithms (families) included by CycloneDX in their Cryptography registry that we do not currentlyy have in our list or we have but in different forms, names.....

1. 3GPP-XOR - Telecom-specific (3GPP), not in SPDX
2. A5/1 - GSM encryption, not in SPDX
3. A5/2 - GSM encryption, not in SPDX
4. Ascon - NIST lightweight crypto winner, not in SPDX
5. ASN1 - Notation system, not cryptographic algorithm
6. BLS - Boneh-Lynn-Shacham signatures, not in SPDX
7. blum-goldwasser - Not in SPDX
8. ECDSA - Elliptic Curve DSA, surprisingly not in SPDX
9. ECIES - EC Integrated Encryption, not in SPDX
10. EdDSA - Edwards-curve DSA, not in SPDX
11. HC - Stream cipher family, not in SPDX (though hc128/hc256 exist separately)
12. HKDF - Key derivation function, not in SPDX
13. HMAC - Message authentication code, not in SPDX as standalone
14. IKE-PRF - IKE pseudo-random function, not in SPDX
15. KMAC - Keccak MAC, not in SPDX
16. LMS - Leighton-Micali Signature, not in SPDX
17. MILENAGE - Telecom-specific (3GPP), not in SPDX
18. ML-DSA - Post-quantum (CRYSTALS-Dilithium), not in SPDX
19. ML-KEM - Post-quantum (CRYSTALS-Kyber), not in SPDX
20. PBMAC1 - Password-Based MAC, not in SPDX
21. pkcs12 - PKCS #12, not a cryptographic algorithm per se
22. Poly1305 - One-time authenticator, not in SPDX
23. SipHash - Fast PRF, not in SPDX
24. SLH-DSA - Post-quantum (SPHINCS+), not in SPDX
25. SP800-108 - NIST KDF framework, not in SPDX
26. TUAK - Telecom-specific (3GPP), not in SPDX
27. X3DH - Signal Protocol key agreement, not in SPDX
28. XMSS - Extended Merkle Signature, not in SPDX

PQ algorithms

The following ones could be the following candidates for the SPDX List:

• Post-quantum algorithms: ML-DSA, ML-KEM, SLH-DSA, LMS, XMSS
• Modern standards: EdDSA, ECDSA, HKDF, HMAC
• Telecom: 3GPP-XOR, MILENAGE, TUAK

Coming from a different source:

• kyber: ml-kemCRYSTALS-Kyber (ML-KEM)
• dilithium: ml-dsaCRYSTALS-Dilithium (ML-DSA)
• falcon: fn-dsaFALCON (FN-DSA)
• sphincsplus: slh-dsaSPHINCS+ (SLH-DSA)
• bike: Bit Flipping Key Encapsulation
• hqc: Hamming Quasi-Cyclic
• frodokem: FrodoKEM
• xmss: eXtended Merkle Signature Scheme

Start by reviewing the CycloneDX cryptography registry linked in the issue and compare its 28 algorithms with the current SPDX list. The issue does not name a repository file or test, and done would require deciding which candidates belong in SPDX and documenting or applying those additions consistently.