thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

Cryptographic Bill of Materials (CBOM)

Inventory of cryptographic assets, algorithms, keys, certificates, and libraries used by a system.

Definition

A CBOM, supported as an extension of the CycloneDX SBOM standard, documents where and how cryptography is used. It helps organizations find quantum-vulnerable algorithms, weak key sizes, and expiring certificates. Cryptographic inventory is the first step recommended by NIST, CISA, and NSA for PQC migration.

Example

A CBOM scan reveals that a legacy service still uses RSA-1024 and SHA-1 signatures.

Exam tip

You cannot migrate cryptography you have not inventoried.

Related terms