Introduction¶

What is CBOM Generator?¶

The Cryptography Bill of Materials (CBOM) Generator is a production-ready, high-performance C11 multithreaded application that inventories cryptographic assets on Linux systems to assess Post-Quantum Cryptography (PQC) readiness.

Key Capabilities¶

Comprehensive Asset Discovery: Certificates, keys, packages, services, protocols, cipher suites
Complete Dependency Graph: Tracks relationships between services, protocols, and algorithms
PQC Readiness Assessment: Analyzes quantum vulnerability across your entire cryptographic infrastructure
High Performance: Scans 12,000+ files/minute with parallel processing
Privacy-by-Default: GDPR/CCPA compliant with configurable redaction
Industry Standards: Outputs CycloneDX 1.6/1.7 format with CBOM extensions

Version: 1.9.0 | Platform: Linux (Ubuntu, RHEL, Debian)

Why Use CBOM Generator?¶

For Security Teams¶

Inventory all cryptographic assets before quantum computers break current encryption
Identify weak or deprecated algorithms that need immediate replacement
Track certificate expiration and trust issues
Map service dependencies on cryptographic components

For Compliance¶

Generate machine-readable cryptographic inventories for audits (CyclneDX standard format)
Track FIPS 140-2/3 certified implementations
Document privacy controls and data redaction
Provide SLSA provenance for build transparency

For Operations¶

Discover all TLS/SSH configurations across infrastructure
Identify services using deprecated protocols or cipher suites
Plan migrations with PQC readiness scoring and recommendations

Yocto CBOM Sample¶

Click to expand: Full first 200 lines of yocto-cbom.json

{
  "bomFormat":"CycloneDX",
  "specVersion":"1.7",
  "serialNumber":"urn:uuid:19495cff-dc51-4873-9869-327b23c64567",
  "version":1,
  "metadata":{
    "timestamp":"2025-12-01T16:29:48Z",
    "tools":{
      "components":[
        {
          "type":"application",
          "bom-ref":"cipheriq-tool",
          "supplier":{
            "name":"Graziano Labs Corp."
          },
          "name":"CipherIQ",
          "version":"1.9.0",
          "description":"High-performance cryptographic asset scanner for Linux systems",
          "externalReferences":[
            {
              "type":"website",
              "url":"https:\/\/www.cipheriq.io"
            },
            {
              "type":"support",
              "url":"mailto:support@cipheriq.io"
            }
          ],
          "properties":[
            {
              "name":"cbom:tool:executable",
              "value":"cbom-generator"
            },
            {
              "name":"cbom:tool:language",
              "value":"C11"
            }
          ]
        }
      ]
    },
    "component":{
      "type":"operating-system",
      "name":"<host-hash-002dc2e5>",
      "bom-ref":"host-system",
      "properties":[
        {
          "name":"cbom:svc:name",
          "value":"Linux"
        },
        {
          "name":"cbom:ctx:scan_scope",
          "value":"filesystem,certificates"
        }
      ]
    },
    "properties":[
      {
        "name":"cbom:scan_completion_pct",
        "value":"92"
      },
      {
        "name":"cbom:completion:filesystem",
        "value":"95"
      },
      {
        "name":"cbom:completion:processes",
        "value":"0"
      },
      {
        "name":"cbom:completion:packages",
        "value":"0"
      },
      {
        "name":"cbom:completion:certificates",
        "value":"90"
      },
      {
        "name":"cbom:host:cpu_arch",
        "value":"x86_64"
      },
      {
        "name":"cbom:host:cpu_cores",
        "value":"32"
      },
      {
        "name":"cbom:host:mem_total_mb",
        "value":"128488"
      },
      {
        "name":"cbom:scan:scan_depth_limit",
        "value":"5"
      },
      {
        "name":"cbom:scan:scan_max_files",
        "value":"10000"
      },
      {
        "name":"cbom:scan:excluded_paths",
        "value":"[\"\\\/proc\",\"\\\/sys\",\"\\\/dev\",\"\\\/run\",\"\\\/tmp\"]"
      },
      {
        "name":"cbom:scan:excluded_fs_types",
        "value":"[\"proc\",\"sysfs\",\"devtmpfs\"]"
      },
      {
        "name":"cbom:scan:container_mode",
        "value":"host"
      },
      {
        "name":"cbom:privacy:no_personal_data",
        "value":"true"
      },
      {
        "name":"cbom:privacy:redaction_applied",
        "value":"true"
      },
      {
        "name":"cbom:privacy:methods",
        "value":"[\"hostname_redaction\",\"username_redaction\",\"path_redaction\",\"evidence_sanitization\"]"
      },
      {
        "name":"cbom:privacy:compliance",
        "value":"[\"GDPR\",\"CCPA\"]"
      },
      {
        "name":"cbom:privacy:mode",
        "value":"privacy_by_default"
      },
      {
        "name":"cbom:network:no_network",
        "value":"false"
      },
      {
        "name":"cbom:relationships:relationships_total",
        "value":"392"
      },
      {
        "name":"cbom:relationships:relationships_typed",
        "value":"138"
      },
      {
        "name":"cbom:relationships:relationships_evidence",
        "value":"254"
      },
      {
        "name":"cbom:provenance:tool_name",
        "value":"cbom-generator"
      },
      {
        "name":"cbom:provenance:tool_version",
        "value":"1.9.0"
      },
      {
        "name":"cbom:provenance:git_commit",
        "value":"c4c9099c00f7fdefc94912b0732a8134dc607fae"
      },
      {
        "name":"cbom:provenance:git_branch",
        "value":"main"
      },
      {
        "name":"cbom:provenance:build_timestamp",
        "value":"2025-12-01T03:09:26Z"
      },
      {
        "name":"cbom:provenance:compiler",
        "value":"\/usr\/bin\/cc"
      },
      {
        "name":"cbom:provenance:compiler_version",
        "value":"11.4.0"
      },
      {
        "name":"cbom:provenance:openssl_version",
        "value":"3.0.2"
      },
      {
        "name":"cbom:provenance:json_c_version",
        "value":"0.15"
      },
      {
        "name":"cbom:provenance:build_type",
        "value":"Release"
      },
      {
        "name":"cbom:provenance:build_host",
        "value":"Linux-6.5.0-1024-oem"
      },
      {
        "name":"cbom:outputs:0:path",
        "value":"cbom.cdx.json"
      },
      {
        "name":"cbom:outputs:0:sha256",
        "value":"pending"
      }
    ]
  },
  "components":[

View the full Yocto CBOM on GitHub (pretty-printed, searchable)↗

License¶

crypto-tracer like all the tools in CipherIQ is dual-licensed:

GPL 3.0 - Free for open-source use (copyleft applies when distributing)
Commercial license - For proprietary integration without copyleft obligations

See details

Quick Links¶

Installation - Get started with building and installing
Quick Start - Run your first scan
CLI Reference - Complete command-line options
Features - Deep-dive into capabilities
Playbooks - Step-by-step migration guides