{ "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a464c277-2fc7-4153-972a-1d60aa709c51", "version": 1, "metadata": { "timestamp": "2026-10-30T20:55:22Z", "tools": { "components": [ { "type": "application", "name": "flcl", "publisher": "limes datentechnik gmbh" } ] } }, "components": [ { "type": "cryptographic-asset", "bom-ref": "cbom-0", "name": "AES-CBC-128", "description": "AES-128 CBC via CPACF KMC", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "128", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:27" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-1", "name": "AES-CBC-128", "description": "Symmetric encryption in CBC mode; Data encryption key in FLAM suite V01 (KEYLEN1=16); Data encryption key in FLAM suite V02 (KEYLEN1=16)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "128", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:24, nuc/NUCCRY01.c:16, nuc/NUCCRY02.c:16" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-2", "name": "AES-CBC-128", "description": "AES-128 CBC via PKCS11 HSM (CKM_AES_CBC)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "128", "implementationPlatform": "p11" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/FKM/P11SYM.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-3", "name": "AES-CBC-192", "description": "AES-192 CBC via CPACF KMC", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "192", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:31" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-4", "name": "AES-CBC-192", "description": "Symmetric encryption in CBC mode", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "192", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:27" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-5", "name": "AES-CBC-192", "description": "AES-192 CBC via PKCS11 HSM", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "192", "implementationPlatform": "p11" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/FKM/P11SYM.c:12" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-6", "name": "AES-CBC-256", "description": "AES-256 CBC with secure key via z/OS ICSF (CSNBSYE/CSNBSYD)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "256", "implementationPlatform": "cca" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CCA.c:27" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-7", "name": "AES-CBC-256", "description": "AES-256 CBC via CPACF KMC", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "256", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:35" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-8", "name": "AES-CBC-256", "description": "Symmetric encryption in CBC mode; Data encryption key in FLAM suite V03 (KEYLEN1=32); Data encryption key in FLAM suite V04 (KEYLEN1=32); Data encryption key in FLAM suite V05 (KEYLEN1=32); Data encryption key in FLAM suite V06 (KEYLEN1=32)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "256", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:30, nuc/NUCCRY03.c:16, nuc/NUCCRY04.c:16, nuc/NUCCRY05.c:16, nuc/NUCCRY06.c:16" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-9", "name": "AES-CBC-256", "description": "AES-256 CBC via PKCS11 HSM", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "256", "implementationPlatform": "p11" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/FKM/P11SYM.c:15" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-10", "name": "AES-CFB-128", "description": "Symmetric encryption in CFB stream mode", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "128", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:42" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-11", "name": "AES-CFB-192", "description": "Symmetric encryption in CFB stream mode", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "192", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:45" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-12", "name": "AES-CFB-256", "description": "Symmetric encryption in CFB stream mode", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "256", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:48" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-13", "name": "AES-CMAC-128", "description": "AES-128 CMAC via CPACF KMAC", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cmac", "parameterSetIdentifier": "128", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:63" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-14", "name": "AES-CMAC-128", "description": "AES-based CBC-MAC (NIST SP 800-38B); FLAM segment integrity MAC; MAC key in FLAM suite V01 (KEYLEN2=16); MAC key in FLAM suite V02 (KEYLEN2=16); MAC key in FLAM suite V03 (KEYLEN2=16); MAC key in FLAM suite V04 (KEYLEN2=16)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cmac", "parameterSetIdentifier": "128", "implementationPlatform": "own" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CRY.c:9, nuc/NUCCRY01.c:19, nuc/NUCCRY02.c:19, nuc/NUCCRY03.c:19, nuc/NUCCRY04.c:19" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-15", "name": "AES-CMAC-192", "description": "AES-192 CMAC via CPACF KMAC", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cmac", "parameterSetIdentifier": "192", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:67" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-16", "name": "AES-CMAC-192", "description": "AES-based CBC-MAC (NIST SP 800-38B)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cmac", "parameterSetIdentifier": "192", "implementationPlatform": "own" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CRY.c:12" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-17", "name": "AES-CMAC-256", "description": "AES-256 CMAC via CPACF KMAC", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cmac", "parameterSetIdentifier": "256", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:71" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-18", "name": "AES-CMAC-256", "description": "AES-based CBC-MAC (NIST SP 800-38B); FLAM strong segment integrity MAC; MAC key in FLAM suite V05 (KEYLEN2=32); MAC key in FLAM suite V06 (KEYLEN2=32)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cmac", "parameterSetIdentifier": "256", "implementationPlatform": "own" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CRY.c:15, nuc/NUCCRY05.c:19, nuc/NUCCRY06.c:19" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-19", "name": "AES-CTR-128", "description": "AES-128 CTR via CPACF KMCTR", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ctr", "parameterSetIdentifier": "128", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:39" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-20", "name": "AES-CTR-128", "description": "Symmetric encryption in CTR counter mode", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ctr", "parameterSetIdentifier": "128", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:51" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-21", "name": "AES-CTR-192", "description": "AES-192 CTR via CPACF KMCTR", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ctr", "parameterSetIdentifier": "192", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:43" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-22", "name": "AES-CTR-192", "description": "Symmetric encryption in CTR counter mode", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ctr", "parameterSetIdentifier": "192", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:54" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-23", "name": "AES-CTR-256", "description": "AES-256 CTR via CPACF KMCTR", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ctr", "parameterSetIdentifier": "256", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:47" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-24", "name": "AES-CTR-256", "description": "Symmetric encryption in CTR counter mode", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ctr", "parameterSetIdentifier": "256", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:57" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-25", "name": "AES-ECB-128", "description": "AES-128 ECB via CPACF KM", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ecb", "parameterSetIdentifier": "128", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:15" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-26", "name": "AES-ECB-128", "description": "Block cipher (legacy/key-wrap only -- do not use for data encryption)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ecb", "parameterSetIdentifier": "128", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:15" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-27", "name": "AES-ECB-192", "description": "AES-192 ECB via CPACF KM", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ecb", "parameterSetIdentifier": "192", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:19" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-28", "name": "AES-ECB-192", "description": "Block cipher (legacy/key-wrap only -- do not use for data encryption)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ecb", "parameterSetIdentifier": "192", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:18" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-29", "name": "AES-ECB-256", "description": "AES-256 ECB via CPACF KM", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ecb", "parameterSetIdentifier": "256", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:23" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-30", "name": "AES-ECB-256", "description": "Block cipher (legacy/key-wrap only -- do not use for data encryption)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ecb", "parameterSetIdentifier": "256", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:21" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-31", "name": "AES-GCM-128", "description": "AES-128 GCM (AEAD) via CPACF KMA", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "gcm", "parameterSetIdentifier": "128", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:51" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-32", "name": "AES-GCM-128", "description": "Authenticated encryption with associated data (AEAD)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "gcm", "parameterSetIdentifier": "128", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:60" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-33", "name": "AES-GCM-128", "description": "AES-128 GCM via PKCS11 HSM (CKM_AES_GCM)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "gcm", "parameterSetIdentifier": "128", "implementationPlatform": "p11" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/FKM/P11SYM.c:18" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-34", "name": "AES-GCM-192", "description": "AES-192 GCM (AEAD) via CPACF KMA", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "gcm", "parameterSetIdentifier": "192", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:55" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-35", "name": "AES-GCM-192", "description": "Authenticated encryption with associated data (AEAD)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "gcm", "parameterSetIdentifier": "192", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:63" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-36", "name": "AES-GCM-192", "description": "AES-192 GCM via PKCS11 HSM", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "gcm", "parameterSetIdentifier": "192", "implementationPlatform": "p11" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/FKM/P11SYM.c:21" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-37", "name": "AES-GCM-256", "description": "AES-256 GCM (AEAD) via CPACF KMA", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "gcm", "parameterSetIdentifier": "256", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:59" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-38", "name": "AES-GCM-256", "description": "Authenticated encryption with associated data (AEAD)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "gcm", "parameterSetIdentifier": "256", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:66" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-39", "name": "AES-GCM-256", "description": "AES-256 GCM via PKCS11 HSM", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "gcm", "parameterSetIdentifier": "256", "implementationPlatform": "p11" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/FKM/P11SYM.c:24" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-40", "name": "AES-OFB-128", "description": "Symmetric encryption in OFB stream mode", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ofb", "parameterSetIdentifier": "128", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:33" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-41", "name": "AES-OFB-192", "description": "Symmetric encryption in OFB stream mode", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ofb", "parameterSetIdentifier": "192", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:36" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-42", "name": "AES-OFB-256", "description": "Symmetric encryption in OFB stream mode", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ofb", "parameterSetIdentifier": "256", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLAES.c:39" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-43", "name": "BLOWFISH-CFB-128", "description": "OpenPGP legacy cipher (RFC 4880 SA=4) -- read-only support", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "128", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/PGP/PGPUTL.c:23" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-44", "name": "CAMELLIA-CFB-128", "description": "OpenPGP legacy cipher (RFC 5581 SA=11) -- read-only support", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "128", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable-until-2030" } ], "evidence": { "occurrences": [ { "location": "CSRC/PGP/PGPUTL.c:31" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-45", "name": "CAMELLIA-CFB-192", "description": "OpenPGP legacy cipher (RFC 5581 SA=12) -- read-only support", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "192", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/PGP/PGPUTL.c:35" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-46", "name": "CAMELLIA-CFB-256", "description": "OpenPGP legacy cipher (RFC 5581 SA=13) -- read-only support", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "256", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/PGP/PGPUTL.c:39" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-47", "name": "CAST5-CFB-128", "description": "OpenPGP legacy cipher (RFC 4880 SA=3) -- read-only support", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "128", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/PGP/PGPUTL.c:19" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-48", "name": "EVP-BytesToKey", "description": "Legacy OpenSSL KDF (single-round key+IV derivation)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "kdf", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/SECUTL.c:15" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-49", "name": "HMAC-SHA-1", "description": "Message authentication code with SHA-1 (legacy; for reading old archives)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "mac", "implementationPlatform": "own" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLHMAC.c:13" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-50", "name": "HMAC-SHA-256", "description": "Message authentication code with SHA-256 (primary integrity MAC)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "mac", "implementationPlatform": "own" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLHMAC.c:16" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-51", "name": "HMAC-SHA-512", "description": "Message authentication code with SHA-512 (used by PGP SEIP)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "mac", "implementationPlatform": "own" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLHMAC.c:19" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-52", "name": "HMAC-SHA3-512", "description": "Message authentication code with SHA3-512", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "mac", "implementationPlatform": "own" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLHMAC.c:22" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-53", "name": "IDEA-CFB-128", "description": "OpenPGP legacy cipher (RFC 4880 SA=1) -- read-only support", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "128", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/PGP/PGPUTL.c:15" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-54", "name": "MD5", "description": "Legacy hash for reading OpenPGP messages that reference it; not used for new data", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "broken" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLMD5.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-55", "name": "PBKDF2-SHA-256", "description": "Password-based key derivation (PKCS5, generic PBKDF2_HMAC entry point); Password-based key derivation for FLAM suite V01; Password-based key derivation for FLAM suite V02; Password-based key derivation for FLAM suite V03; Password-based key derivation for FLAM suite V04; Password-based key derivation for FLAM suite V05; Password-based key derivation for FLAM suite V06", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "kdf", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/SECUTL.c:9, nuc/NUCCRY01.c:22, nuc/NUCCRY02.c:22, nuc/NUCCRY03.c:22, nuc/NUCCRY04.c:22, nuc/NUCCRY05.c:22, nuc/NUCCRY06.c:22" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-56", "name": "PBKDF2-SHA3-512", "description": "Password-based key derivation (FLAM strong variant, 10000 iterations)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "kdf", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/SECUTL.c:12" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-57", "name": "RIPEMD-160", "description": "Legacy hash for reading OpenPGP messages that reference it", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLRMD160.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-58", "name": "RSA", "description": "RSA digital signature, PKCS1 v1.5 and PSS, for client authentication (JWT client assertion) and manifest signing", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "public-key", "implementationPlatform": "openssl" } }, "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLASYM.c:25" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-59", "name": "RSA-2048", "description": "RSA key gen/encrypt/sign via z/OS ICSF (CSNDSYG, CSNDDSG, CSNDDSV, CSNDPKE, CSNDPKD); PGP RSA key import/export via z/OS ICSF CCA callables", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "public-key", "parameterSetIdentifier": "2048", "implementationPlatform": "cca" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable-until-2030" } ], "evidence": { "occurrences": [ { "location": "CSRC/CCA.c:15, CSRC/FKM/CCAPGP.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-60", "name": "RSA-2048", "description": "PGP RSA keypair accessed from z/OS SAF Key Ring", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "public-key", "parameterSetIdentifier": "2048", "implementationPlatform": "own" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable-until-2030" } ], "evidence": { "occurrences": [ { "location": "CSRC/FKM/RNGPGP.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-61", "name": "RSA-3072", "description": "RSA key gen/encrypt/sign via z/OS ICSF; PGP RSA key import/export via z/OS ICSF CCA callables", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "public-key", "parameterSetIdentifier": "3072", "implementationPlatform": "cca" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CCA.c:19, CSRC/FKM/CCAPGP.c:13" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-62", "name": "RSA-3072", "description": "PGP RSA keypair accessed from z/OS SAF Key Ring", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "public-key", "parameterSetIdentifier": "3072", "implementationPlatform": "own" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/FKM/RNGPGP.c:13" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-63", "name": "RSA-4096", "description": "RSA key gen/encrypt/sign via z/OS ICSF; PGP RSA key import/export via z/OS ICSF CCA callables", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "public-key", "parameterSetIdentifier": "4096", "implementationPlatform": "cca" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CCA.c:23, CSRC/FKM/CCAPGP.c:17" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-64", "name": "RSA-4096", "description": "PGP RSA keypair accessed from z/OS SAF Key Ring", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "public-key", "parameterSetIdentifier": "4096", "implementationPlatform": "own" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/FKM/RNGPGP.c:17" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-65", "name": "SHA-1", "description": "SHA-1 via CPACF KIMD (legacy)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:75" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-66", "name": "SHA-1", "description": "Legacy hash function (deprecated for new signatures; OK as HMAC inner hash)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLSHA1.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-67", "name": "SHA-224", "description": "SHA-2 family digest (224-bit output)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLSHA256.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-68", "name": "SHA-256", "description": "SHA-256 via CPACF KIMD", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:79" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-69", "name": "SHA-256", "description": "SHA-256 thumbprint of the certificate a key arrived with, for the x5t-S256 header of a JWT client assertion; SHA-2 family digest (256-bit output; primary hash for integrity + HMAC)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLASYM.c:29, CSRC/CRYPTO/FLSHA256.c:12" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-70", "name": "SHA-384", "description": "SHA-2 family digest (384-bit output)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLSHA512.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-71", "name": "SHA-512", "description": "SHA-512 via CPACF KIMD", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:83" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-72", "name": "SHA-512", "description": "SHA-2 family digest (512-bit output; used by PGP SEIP and FLAM key derivation)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLSHA512.c:12" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-73", "name": "SHA3-224", "description": "SHA-3 family Keccak-based digest (224-bit)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "acceptable" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLSHA3.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-74", "name": "SHA3-256", "description": "SHA3-256 via CPACF KIMD (MSA-6, z14+)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:87" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-75", "name": "SHA3-256", "description": "SHA-3 family Keccak-based digest (256-bit)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLSHA3.c:12" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-76", "name": "SHA3-384", "description": "SHA-3 family Keccak-based digest (384-bit)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLSHA3.c:15" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-77", "name": "SHA3-512", "description": "SHA3-512 via CPACF KIMD (MSA-6, z14+)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "cpacf" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:91" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-78", "name": "SHA3-512", "description": "SHA-3 family Keccak-based digest (512-bit; used by FLAM PBKDF2 key derivation)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLSHA3.c:18" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-79", "name": "SHAKE-128", "description": "SHAKE-128 extendable-output function via CPACF KIMD/KLMD (MSA-6, z14+)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "xof", "implementationPlatform": "cpacf" } }, "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:95" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-80", "name": "SHAKE-128", "description": "FIPS 202 extendable-output function (128 bit capacity)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "xof", "implementationPlatform": "openssl,cpacf" } }, "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLSHAKE.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-81", "name": "SHAKE-256", "description": "SHAKE-256 extendable-output function via CPACF KIMD/KLMD (MSA-6, z14+)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "xof", "implementationPlatform": "cpacf" } }, "evidence": { "occurrences": [ { "location": "CSRC/ALGOS/CPACF.c:99" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-82", "name": "SHAKE-256", "description": "FIPS 202 extendable-output function (256 bit capacity)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "xof", "implementationPlatform": "openssl,cpacf" } }, "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLSHAKE.c:12" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-83", "name": "TDES-CBC-168", "description": "Legacy archive decryption only (NIST-disallowed for new encryption since 2023)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cbc", "parameterSetIdentifier": "168", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLTDES.c:19" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-84", "name": "TDES-CFB-168", "description": "Legacy archive decryption only (NIST-disallowed for new encryption since 2023)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "168", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLTDES.c:27" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-85", "name": "TDES-ECB-168", "description": "Legacy archive decryption only (NIST-disallowed for new encryption since 2023)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ecb", "parameterSetIdentifier": "168", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "broken" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLTDES.c:15" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-86", "name": "TDES-OFB-168", "description": "Legacy archive decryption only (NIST-disallowed for new encryption since 2023)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "ofb", "parameterSetIdentifier": "168", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLTDES.c:23" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-87", "name": "TWOFISH-CFB-256", "description": "OpenPGP legacy cipher (RFC 4880 SA=10) -- read-only support", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "mode": "cfb", "parameterSetIdentifier": "256", "implementationPlatform": "openssl" } }, "properties": [ { "name": "de.bsi.tr-02102-1", "value": "not-recommended" } ], "evidence": { "occurrences": [ { "location": "CSRC/PGP/PGPUTL.c:27" } ] } }, { "type": "library", "bom-ref": "cbom-88", "name": "LIB-LIBSSH", "description": "SSH/SFTP transport backend", "evidence": { "occurrences": [ { "location": "CSRC/FL5CORE.c:181" } ] } }, { "type": "library", "bom-ref": "cbom-89", "name": "LIB-OPENSSL", "description": "EVP cipher, HMAC, digest, KDF backend for TLS and own crypto", "evidence": { "occurrences": [ { "location": "CSRC/FL5CORE.c:171" } ] } }, { "type": "library", "bom-ref": "cbom-90", "name": "LIB-PKCS11", "description": "PKCS11 Cryptoki spec interface for HSM and z/OS ICSF", "evidence": { "occurrences": [ { "location": "CSRC/P11.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-91", "name": "CRC-16", "description": "Non-cryptographic checksum (16-bit) for transport-error detection", "cryptoProperties": { "assetType": "relatedCryptoMaterial", "description": "CRC-16" }, "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLCRC16.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-92", "name": "CRC-24", "description": "Non-cryptographic checksum (24-bit) for transport-error detection", "cryptoProperties": { "assetType": "relatedCryptoMaterial", "description": "CRC-24" }, "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLCRC24.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-93", "name": "CRC-32", "description": "Non-cryptographic checksum (32-bit IEEE) for transport-error detection; Integrity checksum for FLAM suite V02 (non-cryptographic); Integrity checksum for FLAM suite V04 (non-cryptographic); Integrity checksum for FLAM suite V06 (non-cryptographic)", "cryptoProperties": { "assetType": "relatedCryptoMaterial", "description": "CRC-32" }, "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLCRC32.c:9, nuc/NUCCRY02.c:25, nuc/NUCCRY04.c:25, nuc/NUCCRY06.c:25" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-94", "name": "CRC-32C", "description": "Non-cryptographic checksum (Castagnoli variant; stronger error detection than CRC-32)", "cryptoProperties": { "assetType": "relatedCryptoMaterial", "description": "CRC-32C" }, "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLCRC32C.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-95", "name": "CRC-40", "description": "Non-cryptographic checksum (40-bit) for transport-error detection", "cryptoProperties": { "assetType": "relatedCryptoMaterial", "description": "CRC-40" }, "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLCRC40.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-96", "name": "CRC-64", "description": "Non-cryptographic checksum (64-bit) for transport-error detection", "cryptoProperties": { "assetType": "relatedCryptoMaterial", "description": "CRC-64" }, "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLCRC64.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-97", "name": "CRC-8", "description": "Non-cryptographic checksum (8-bit) for transport-error detection", "cryptoProperties": { "assetType": "relatedCryptoMaterial", "description": "CRC-8" }, "evidence": { "occurrences": [ { "location": "CSRC/CRYPTO/FLCRC8.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-98", "name": "FLAM-SUITE-V01", "description": "FLAM5 crypto suite V01: AES-128-CBC + AES-128-CMAC + PBKDF2 (FNV integrity)", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "other", "cryptoRefArray": [] } }, "evidence": { "occurrences": [ { "location": "nuc/NUCCRY01.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-99", "name": "FLAM-SUITE-V02", "description": "FLAM5 crypto suite V02: AES-128-CBC + AES-128-CMAC + PBKDF2 (CRC integrity)", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "other", "cryptoRefArray": [] } }, "evidence": { "occurrences": [ { "location": "nuc/NUCCRY02.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-100", "name": "FLAM-SUITE-V03", "description": "FLAM5 crypto suite V03: AES-256-CBC + AES-128-CMAC + PBKDF2 (FNV integrity)", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "other", "cryptoRefArray": [] } }, "evidence": { "occurrences": [ { "location": "nuc/NUCCRY03.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-101", "name": "FLAM-SUITE-V04", "description": "FLAM5 crypto suite V04: AES-256-CBC + AES-128-CMAC + PBKDF2 (CRC integrity)", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "other", "cryptoRefArray": [] } }, "evidence": { "occurrences": [ { "location": "nuc/NUCCRY04.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-102", "name": "FLAM-SUITE-V05", "description": "FLAM5 crypto suite V05: AES-256-CBC + AES-256-CMAC + PBKDF2 (FNV integrity)", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "other", "cryptoRefArray": [] } }, "evidence": { "occurrences": [ { "location": "nuc/NUCCRY05.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-103", "name": "FLAM-SUITE-V06", "description": "FLAM5 crypto suite V06: AES-256-CBC + AES-256-CMAC + PBKDF2 (CRC integrity)", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "other", "cryptoRefArray": [] } }, "evidence": { "occurrences": [ { "location": "nuc/NUCCRY06.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-104", "name": "OPENPGP-SEIP", "description": "OpenPGP RFC 4880 Symmetrically Encrypted Integrity Protected data packet", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "other", "cryptoRefArray": [] } }, "evidence": { "occurrences": [ { "location": "CSRC/PGP/PGP.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-105", "name": "SSH", "description": "Secure Shell transport for SFTP file access (libssh backend, FLAM crypto injection optional)", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "other", "cryptoRefArray": [] } }, "evidence": { "occurrences": [ { "location": "CSRC/FLMSSH.c:9" } ] } }, { "type": "cryptographic-asset", "bom-ref": "cbom-106", "name": "TLS", "description": "Transport Layer Security for the REST/HTTPS client on z/OS (System SSL via the HTTP enabler)", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "other", "cryptoRefArray": [] } }, "evidence": { "occurrences": [ { "location": "CSRC/FLHTTPHZ.c:53" } ] } } ] }