logoalt Hacker News

plopilopyesterday at 7:54 PM2 repliesview on HN

Man, the CBOM is such a pain. There is no standardised format yet (let alone efficient tools for crypto discovery), nobody knew what it was one year ago but now every client is asking ours anyway.


Replies

dredmorbiusyesterday at 8:32 PM

CBOM: Cryptography bill of materials.

<https://cyclonedx.org/capabilities/cbom/>

alphageryesterday at 8:08 PM

Tell me about it! We've got slightly under 10'000 distinct software assets we are trying to catalogue. There are now a handful of vendors claiming to be able to scan for crypto, but they all suck.

show 1 reply