cryptography
4.0 out of 5 starsAverage Ratings 0 Ratings
Average Ratings 1 Rating
Description
RaptorGRC CBOM serves as a self-managed tool designed to discover and inventory cryptographic elements for organizations looking to transition to post-quantum cryptography. Its functionality includes scanning TLS and SSH endpoints, as well as web URLs that can be manually entered or imported from CSV files, alongside examining certificate stores for both Windows and Linux. Additionally, it assesses Windows SCHANNEL and Group Policy settings, along with Linux crypto-policies and configurations for OpenSSL and sshd. The software effectively catalogs certificates, keys, protocols, and algorithms, pinpointing any weak or quantum-vulnerable cryptographic components, ultimately providing a signed CycloneDX 1.7 cryptographic bill of materials. Teams benefit from the ability to categorize assets by service, document data sensitivity and retention requirements, prioritize migration efforts, compare different scan results, and produce reports for board readiness, NCSC 2028 discovery, remediation, and OMB M-23-02 compliance. The system operates as a container hosted on Linux, can function offline, and is compatible with SQLite, PostgreSQL, or SQL Server databases. Currently, the beta version is available for assessment purposes only and is not intended for use in production environments, ensuring that users can test its capabilities without the risks associated with live deployment.
Description
Cryptography encompasses both high-level methods and low-level interfaces for standard cryptographic techniques, including symmetric ciphers, message digests, and key derivation functions. By utilizing the high-level symmetric encryption method provided by cryptography, users can easily perform encryption tasks. The field of cryptography is generally classified into two distinct levels: one featuring secure recipes that are straightforward to use with minimal configuration requirements, making them accessible for developers with little decision-making involved. Conversely, the other level comprises low-level cryptographic primitives that pose significant risks if misapplied, necessitating a thorough understanding of advanced cryptographic principles and careful decision-making. Due to these inherent risks, this lower tier is often labeled as the "hazardous materials" or "hazmat" layer, with relevant resources located in the cryptography.hazmat package, where documentation always includes a warning at the beginning to highlight the associated dangers. Additionally, mastering these low-level interfaces can lead to powerful custom implementations, but they demand a commitment to learning and adhering to best practices in cryptographic security.
API Access
Has API
No
API Access
Has API
Yes
Integrations
No details available.
Integrations
No details available.
Pricing Details
$0
Free to install and run on infrastructure you control for internal organizational use. The current beta is for evaluation, not production use.
Free Trial
No
Free Version
Yes
Pricing Details
Free
Free Trial
No
Free Version
Yes
Deployment
Web-Based
No
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
Yes
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
No
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Biff Labs Ltd
Founded
2026
Country
United Kingdom
Website
raptorgrc.com/products/cbom
Vendor Details
Company Name
cryptography
Founded
2013
Website
cryptography.io/en/latest/