Profiles

CBOM Profiles · Working Group

Presentations

Slides presented to the working group, and elsewhere on its behalf. Search or regroup the list, then download the deck.

Meetings → Working group ↗

PDF 3.7 MB

Advancing CBOM: hands-on with CycloneDX v1.7 and PKI extensions

Michael Osborne, Hart Montgomery · PKI Consortium Post-Quantum Cryptography Conference, Kuala Lumpur

The opening half of the two-hour CBOM workshop: the Linux Foundation's Post-Quantum Cryptography Alliance and its projects, then the case for a standard way of reporting cryptography. The argument that carries into this working group's methodology is on the reporting-versus-scanning slides — no organization has access to all the source code in use, so cryptography in vendor software and hardware has to be reported rather than discovered, and what has to be reported depends on the use case. The later sessions on use cases and open-source tooling are not in this deck.

workshopcyclonedxpqcafundamentalsuse-cases

Download PDF ↓ Open in browser

For maintainers. Presentations are one data file, docs/_data/presentations.yml. A deck committed under docs/assets/presentations/ is served from this site and its link cannot rot; one held elsewhere is linked with url: and marked external. Field definitions are in CONTRIBUTING-meetings.md.