{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0d8e105b-d7ce-4e25-b877-dcd66d9a6075", "version": 3, "metadata": { "timestamp": "2026-10-05T00:00:00Z", "tools": { "components": [ { "type": "application", "group": "CyCity Inc", "name": "CQWS Sovereign CBOM & Dual-Stack Migration Scanner", "version": "4.2.0-FIPS203" } ] }, "component": { "type": "operating-system", "group": "CyCity Inc", "name": "CyCity Quantum Web Standard (CQWS)", "version": "4.2-PROD", "description": "Sovereign In-Kernel Ring-0 Post-Quantum & Dual-Stack Hybrid Cryptographic Architecture" }, "manufacturer": { "name": "CyCity Inc / CyCity International Pvt Ltd", "url": [ "https://www.cycity.space", "https://www.cycity.cloud" ] }, "properties": [ { "name": "cycity:architecture:dual-stack-hybrid", "value": "IETF LAMPS / Composite X.509 ACTIVE" }, { "name": "cycity:compliance:fips203", "value": "NIST FIPS 203 (ML-KEM) 100% VECTOR CONFORMANT" }, { "name": "cycity:compliance:fips204", "value": "NIST FIPS 204 (ML-DSA) 100% VECTOR CONFORMANT" }, { "name": "cycity:compliance:fips205", "value": "NIST FIPS 205 (SLH-DSA) COMPLIANT_ENFORCED" }, { "name": "cycity:acvp:conformance", "value": "4,100 / 4,100 ACVP & CAVP Vectors Passed (13 Cryptographic Algorithms + SP 800-90B QRNG)" }, { "name": "cycity:compliance:rbi-qsafe", "value": "RBI Q-SAFE 2024-2026 Directives Met" }, { "name": "cycity:compliance:cnsa2", "value": "CNSA 2.0 Tier-1 Enforced" } ] }, "components": [ { "type": "cryptographic-asset", "name": "RSA-2048 (PKCS#1 v1.5 / OAEP / PSS)", "version": "Legacy Classical Baseline", "description": "Legacy classical asymmetric encryption and signature algorithm (Vulnerable to Shor's Algorithm on CRQC)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "parameterSetIdentifier": "RSA-2048", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "keygen", "encrypt", "decrypt", "sign", "verify" ], "classicalSecurityLevel": 112, "nistQuantumSecurityLevel": 0 }, "oid": "1.2.840.113549.1.1.1" } }, { "type": "cryptographic-asset", "name": "RSA-3072 (IETF RFC 8017)", "version": "Legacy High-Security Classical Baseline", "description": "Legacy 128-bit classical asymmetric key exchange and digital signature (Subject to Mosca inequality collapse)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "parameterSetIdentifier": "RSA-3072", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "keygen", "sign", "verify" ], "classicalSecurityLevel": 128, "nistQuantumSecurityLevel": 0 }, "oid": "1.2.840.113549.1.1.1" } }, { "type": "cryptographic-asset", "name": "ECDSA P-256 (secp256r1)", "version": "Legacy Elliptic Curve Baseline", "description": "Legacy NIST elliptic curve digital signature used in classic mTLS and banking APIs (Vulnerable to Shor's Polynomial)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "parameterSetIdentifier": "secp256r1", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "keygen", "sign", "verify" ], "classicalSecurityLevel": 128, "nistQuantumSecurityLevel": 0 }, "oid": "1.2.840.10045.4.3.2" } }, { "type": "cryptographic-asset", "name": "X25519 / Curve25519 (RFC 7748)", "version": "Classical TLS 1.3 Baseline", "description": "Standard classical Diffie-Hellman key agreement utilized in hybrid key exchange pairings", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "kem", "parameterSetIdentifier": "X25519", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "keygen", "encapsulate", "decapsulate" ], "classicalSecurityLevel": 128, "nistQuantumSecurityLevel": 0 }, "oid": "1.3.101.110" } }, { "type": "cryptographic-asset", "name": "AES-128-GCM (NIST SP 800-38D)", "version": "Legacy Symmetric Baseline", "description": "Legacy symmetric block cipher (Vulnerable to Grover's quantum key-space reduction to 64 effective bits)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "parameterSetIdentifier": "AES-128-GCM", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "encrypt", "decrypt" ], "classicalSecurityLevel": 128, "nistQuantumSecurityLevel": 1 }, "oid": "2.16.840.1.101.3.4.1.6" } }, { "type": "cryptographic-asset", "name": "SHA-256 (FIPS 180-4)", "version": "Classical Cryptographic Hash Baseline", "description": "Standard cryptographic hash function used in classical message authentication and digest calculations", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "parameterSetIdentifier": "SHA-256", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "digest" ], "classicalSecurityLevel": 256, "nistQuantumSecurityLevel": 1 }, "oid": "2.16.840.1.101.3.4.2.1" } }, { "type": "cryptographic-asset", "name": "ML-KEM-768 (FIPS 203)", "version": "v1.0-FIPS", "description": "Primary Module-Lattice Key Encapsulation Mechanism (Kyber-768) providing Category 3 post-quantum confidentiality", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "kem", "parameterSetIdentifier": "ML-KEM-768", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "keygen", "encapsulate", "decapsulate" ], "classicalSecurityLevel": 192, "nistQuantumSecurityLevel": 3 }, "oid": "2.16.840.1.101.3.4.4.2" } }, { "type": "cryptographic-asset", "name": "ML-KEM-1024 (FIPS 203)", "version": "v1.0-FIPS", "description": "High-Security Module-Lattice Key Encapsulation Mechanism (Kyber-1024) for mission-critical core banking vaults", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "kem", "parameterSetIdentifier": "ML-KEM-1024", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "keygen", "encapsulate", "decapsulate" ], "classicalSecurityLevel": 256, "nistQuantumSecurityLevel": 5 }, "oid": "2.16.840.1.101.3.4.4.3" } }, { "type": "cryptographic-asset", "name": "ML-DSA-65 (FIPS 204)", "version": "v1.0-FIPS", "description": "Module-Lattice Digital Signature Algorithm (Dilithium3) for tamper-evident banking packet and ledger attestations", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "parameterSetIdentifier": "ML-DSA-65", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "keygen", "sign", "verify" ], "classicalSecurityLevel": 192, "nistQuantumSecurityLevel": 3 }, "oid": "2.16.840.1.101.3.4.3.18" } }, { "type": "cryptographic-asset", "name": "ML-DSA-87 (FIPS 204)", "version": "v1.0-FIPS", "description": "High-Security Module-Lattice Digital Signature Algorithm (Dilithium5) providing Category 5 quantum signature safety", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "parameterSetIdentifier": "ML-DSA-87", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "keygen", "sign", "verify" ], "classicalSecurityLevel": 256, "nistQuantumSecurityLevel": 5 }, "oid": "2.16.840.1.101.3.4.3.19" } }, { "type": "cryptographic-asset", "name": "SLH-DSA-SHAKE-128s (FIPS 205)", "version": "v1.0-FIPS", "description": "Stateless Hash-based Digital Signature Algorithm (SPHINCS+) for long-lived certificate authority root keys", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "parameterSetIdentifier": "SLH-DSA-SHAKE-128s", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "keygen", "sign", "verify" ], "classicalSecurityLevel": 128, "nistQuantumSecurityLevel": 1 }, "oid": "2.16.840.1.101.3.4.3.22" } }, { "type": "cryptographic-asset", "name": "AES-256-GCM (NIST SP 800-38D)", "version": "Quantum-Resistant Symmetric Standard", "description": "256-bit symmetric block cipher providing 128 bits of post-quantum security margin under Grover's search algorithm", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "parameterSetIdentifier": "AES-256-GCM", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "encrypt", "decrypt" ], "classicalSecurityLevel": 256, "nistQuantumSecurityLevel": 3 }, "oid": "2.16.840.1.101.3.4.1.46" } }, { "type": "cryptographic-asset", "name": "SHA3-512 / SHAKE-256 (FIPS 202)", "version": "Quantum-Resistant Keccak Hash Engine", "description": "Keccak sponge-based hash and extendable-output function providing 256 bits of quantum collision resistance", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "parameterSetIdentifier": "SHA3-512", "executionEnvironment": "software-plain-ram", "implementationPlatform": "x86_64", "cryptoFunctions": [ "digest" ], "classicalSecurityLevel": 512, "nistQuantumSecurityLevel": 5 }, "oid": "2.16.840.1.101.3.4.2.3" } }, { "type": "cryptographic-asset", "name": "Hybrid TLS 1.3 (X25519 + ML-KEM-768)", "version": "IETF LAMPS / draft-ietf-tls-hybrid-design", "description": "Dual-stack hybrid key exchange combining classical elliptic curve (X25519) and lattice PQC (ML-KEM-768) within TLS 1.3 transport protocol", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "tls", "version": "1.3", "cipherSuites": [ { "name": "TLS_AES_256_GCM_SHA384_X25519_MLKEM768", "algorithms": [ "X25519", "ML-KEM-768", "AES-256-GCM" ] } ] } } }, { "type": "cryptographic-asset", "name": "Composite Dual X.509 Path Validation Protocol (RSA-3072 + ML-DSA-65)", "version": "IETF LAMPS Profile (draft-ietf-lamps-pq-composite-sigs)", "description": "X.509 path validation and composite dual-stack digital certificate verification profile validating both classical RSA/ECDSA and post-quantum ML-DSA signatures", "cryptoProperties": { "assetType": "protocol", "protocolProperties": { "type": "other", "version": "1.0" } } }, { "type": "device", "name": "Elohim 24 Sovereign Silicon HSM", "version": "Hardware ASIC v1 (FIPS 140-3 Target)", "description": "Hardware Security Module accelerator providing 24 independent quantum cryptographic co-processors with physical tamper-fuse zeroes" }, { "type": "device", "name": "Quantum Dice Photonic QRNG (DISC™)", "version": "ANU-DISC v3.4 (NIST SP 800-90B Conforming)", "description": "True Quantum Random Number Generator measuring photon fluctuations for uncloneable cryptographic entropy generation" }, { "type": "application", "name": "CQWS Ring-0 Netfilter Interceptor Module", "version": "v4.2.0-kernel-module", "description": "Zero-copy in-kernel eBPF/Netfilter packet inspection engine operating at sub-850us wire latency for transparent banking protocol protection" } ] }