diff --git a/tools/src/test/resources/2.0/valid-cbom-family-only-mlkem-2.0.json b/tools/src/test/resources/2.0/valid-cbom-family-only-mlkem-2.0.json new file mode 100644 index 000000000..77a538cae --- /dev/null +++ b/tools/src/test/resources/2.0/valid-cbom-family-only-mlkem-2.0.json @@ -0,0 +1,35 @@ +{ + "$schema": "https://cyclonedx.org/schema/2.0/cyclonedx-2.0.schema.json", + "specFormat": "CycloneDX", + "specVersion": "2.0", + "serialNumber": "urn:uuid:0d3a9f2e-5c41-4b8e-9f67-2a1b3c4d5e01", + "version": 1, + "metadata": { + "timestamp": "2026-10-26T00:00:00Z" + }, + "inventories": [ + { + "subject": { + "bom-ref": "subject-mlkem-family-only", + "type": "application", + "name": "family-only observation: ML-KEM", + "version": "1.0" + }, + "components": [ + { + "bom-ref": "ml-kem-family-only", + "type": "cryptographic-asset", + "name": "ML-KEM", + "description": "Algorithm family observed without a recorded parameter set or asserted NIST security strength category. Omission of nistQuantumSecurityLevel does not establish whether an assessment was performed.", + "cryptoProperties": { + "assetType": "algorithm", + "algorithmProperties": { + "primitive": "kem", + "algorithmFamily": "ML-KEM" + } + } + } + ] + } + ] +} diff --git a/tools/src/test/resources/2.0/valid-cbom-family-only-sm2-2.0.json b/tools/src/test/resources/2.0/valid-cbom-family-only-sm2-2.0.json new file mode 100644 index 000000000..7a2ad41d3 --- /dev/null +++ b/tools/src/test/resources/2.0/valid-cbom-family-only-sm2-2.0.json @@ -0,0 +1,35 @@ +{ + "$schema": "https://cyclonedx.org/schema/2.0/cyclonedx-2.0.schema.json", + "specFormat": "CycloneDX", + "specVersion": "2.0", + "serialNumber": "urn:uuid:0d3a9f2e-5c41-4b8e-9f67-2a1b3c4d5e02", + "version": 1, + "metadata": { + "timestamp": "2026-10-26T00:00:00Z" + }, + "inventories": [ + { + "subject": { + "bom-ref": "subject-sm2-family-only", + "type": "application", + "name": "family-only observation: SM2", + "version": "1.0" + }, + "components": [ + { + "bom-ref": "sm2-family-only", + "type": "cryptographic-asset", + "name": "SM2", + "description": "Algorithm family observed without a recorded parameter set or asserted NIST security strength category. Omission of nistQuantumSecurityLevel does not establish whether an assessment was performed.", + "cryptoProperties": { + "assetType": "algorithm", + "algorithmProperties": { + "primitive": "signature", + "algorithmFamily": "SM2" + } + } + } + ] + } + ] +}