Скачать или смотреть Know Your Crypto: Standardizing and Detecting Crypto Algorithms the Open Source Way - Matias Daloia

Don't miss out! Join us at the next Open Source Summit in Seoul, South Korea (November 4-5). Join us at the premier vendor-neutral open source conference, where developers and technologists come together to collaborate, share knowledge, and explore the latest innovations and advancements in open source technology. Learn more at https://events.linuxfoundation.org/

Know Your Crypto: Standardizing and Detecting Crypto Algorithms the Open Source Way - Matias Daloia, SCANOSS

Regulatory pressures, quantum computing threats or security breaches in complex supply chains have elevated cryptographic algorithm management to unprecedented importance. Understanding which crypto algorithms your software includes, and the implications for downstream users, is increasingly valued by developers and organizations. Several open source initiatives are now emerging to make cryptographic algorithm detection and declaration universal, enhancing the existing Bill of Materials (xBOM) generation.

This presentation explores some of those emerging initiatives, putting focus in two of the most promising ones:

SPDX Crypto Algorithms List (https://github.com/spdx/crypto-algori... This aims to standardize crypto algorithm declaration.

Open Dataset for Keyword-Based Detection (https://github.com/scanoss/crypto_alg... open dataset for detecting crypto algorithms via keywords, useful for automated scanning.

After a short demo of a simple PoC on how to implement them, the talk will cover the background behind these efforts, the latest news and plans, their relevance for security and transparency, and how participants can use and contribute to them.