BF-CBOM: Uncovering Cryptographic Assets Through Comparative CBOM Analysis at Scale
Abstract
The advancing threat of quantum-capable adversaries accelerates the need to locate and replace vulnerable cryptographic assets in software systems. To support this transition, Cryptography Bills of Materials (CBOMs) are becoming essential for inventorying the cryptographic footprint of software systems as increasingly demanded by regulators in critical domains. While first CBOM generation tools have emerged, they still lack reliable means to comprehend and analyze the cryptographic landscape of codebases.
Publication details
- Journal / source
- Proceedings of the 2026 34th IEEE/ACM International Conference on Program Comprehension
- Publisher
- ACM
- Pages
- 463–467
- Publication date
- 12 April 2026