Algorithms included by CycloneDX that might turn into candidates for SPDX

[toscalix]

This is a list of 28 algorithms (families) included by CycloneDX in their Cryptography registry that we do not currentlyy have in our list or we have but in different forms, names.....

1. 3GPP-XOR - Telecom-specific (3GPP), not in SPDX
2. A5/1 - GSM encryption, not in SPDX
3. A5/2 - GSM encryption, not in SPDX
4. Ascon - NIST lightweight crypto winner, not in SPDX
5. ASN1 - Notation system, not cryptographic algorithm
6. BLS - Boneh-Lynn-Shacham signatures, not in SPDX
7. blum-goldwasser - Not in SPDX
8. ECDSA - Elliptic Curve DSA, surprisingly not in SPDX
9. ECIES - EC Integrated Encryption, not in SPDX
10. EdDSA - Edwards-curve DSA, not in SPDX
11. HC - Stream cipher family, not in SPDX (though hc128/hc256 exist separately)
12. HKDF - Key derivation function, not in SPDX
13. HMAC - Message authentication code, not in SPDX as standalone
14. IKE-PRF - IKE pseudo-random function, not in SPDX
15. KMAC - Keccak MAC, not in SPDX
16. LMS - Leighton-Micali Signature, not in SPDX
17. MILENAGE - Telecom-specific (3GPP), not in SPDX
18. ML-DSA - Post-quantum (CRYSTALS-Dilithium), not in SPDX
19. ML-KEM - Post-quantum (CRYSTALS-Kyber), not in SPDX
20. PBMAC1 - Password-Based MAC, not in SPDX
21. pkcs12 - PKCS categories added and commonkeySize vs securityStrength #12, not a cryptographic algorithm per se
22. Poly1305 - One-time authenticator, not in SPDX
23. SipHash - Fast PRF, not in SPDX
24. SLH-DSA - Post-quantum (SPHINCS+), not in SPDX
25. SP800-108 - NIST KDF framework, not in SPDX
26. TUAK - Telecom-specific (3GPP), not in SPDX
27. X3DH - Signal Protocol key agreement, not in SPDX
28. XMSS - Extended Merkle Signature, not in SPDX

The following ones could be the following candidates for the SPDX List:

• Post-quantum algorithms: ML-DSA, ML-KEM, SLH-DSA, LMS, XMSS
• Modern standards: EdDSA, ECDSA, HKDF, HMAC
• Telecom: 3GPP-XOR, MILENAGE, TUAK

[toscalix]

ffdh should be added too

reference:

• https://csrc.nist.gov/pubs/sp/800/56/a/r3/final
• https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf
• https://www.rfc-editor.org/info/rfc7919