Cryptography Bill of Materials (CBOM) Generation from Binary Executables

A computer-implemented method comprising:

• receiving a software package comprising components executing a plurality of functions;
• generating, for each function, a plurality of intermediate representations;
• generating, for each intermediate representation, a corresponding embedding;
• extracting, for each function, features from each of the intermediate representations and the corresponding embedding;
• determining, for each function using at least one machine learning model and the associated extracted features, a set of calls;
• performing, based on the determined set of calls, a call site analysis to determine cryptographic algorithm parameters;
• generating, based on the set of calls and the call site analysis, a cryptography bill of materials (CBOM) detailing cryptographic primitives and the associated cryptographic algorithm parameters within the software package;
• and
• providing the CBOM to a consuming application or process.

A computer-implemented method comprising:

• identifying functions within a software package that implement or use cryptographic primitives;
• determining a set of calls associated with each of the identified functions;
• performing, based on the determined set of calls, a call site analysis to determine cryptographic algorithm parameters;
• generating, based on the set of calls and the call site analysis, data characterizing the cryptographic primitives within the software package and the associated cryptographic algorithm parameters;
• and
• providing the generated data to a consuming application or process.