From 21699021cb37c98e5096b23d6fd918fe446283d0 Mon Sep 17 00:00:00 2001 From: Sudhir Verma Date: Tue, 8 Jul 2025 17:56:46 +0530 Subject: [PATCH 1/2] Added Quantum Threat and Mitigation in Cbom (#727) --- src/apiDetailsConfig.json | 2 +- .../AssessmentReport/index.tsx | 84 ++++++++++- src/resources/crypto-assets.json | 130 ++++++++++++++++++ 3 files changed, 208 insertions(+), 8 deletions(-) create mode 100644 src/resources/crypto-assets.json diff --git a/src/apiDetailsConfig.json b/src/apiDetailsConfig.json index e193ccc1..8addd4cb 100644 --- a/src/apiDetailsConfig.json +++ b/src/apiDetailsConfig.json @@ -13,6 +13,6 @@ "token": "" }, "activeTool": "github", - "version": "0.28.7", + "version": "0.28.8", "labName": "Be-Secure Community Lab" } diff --git a/src/pages/BesVersionHistory/AssessmentReport/index.tsx b/src/pages/BesVersionHistory/AssessmentReport/index.tsx index 3df84009..bfe97319 100644 --- a/src/pages/BesVersionHistory/AssessmentReport/index.tsx +++ b/src/pages/BesVersionHistory/AssessmentReport/index.tsx @@ -39,11 +39,25 @@ import FetchSastReport from './FetchSastReport'; import { PieChart, Pie, Legend, Cell, Tooltip, Sector } from 'recharts'; import cryptoDictionary from '../../../resources/crypto-dictionary.json'; +import rawCryptoAsset from '../../../resources/crypto-assets.json'; + import * as d3 from 'd3'; import { ArrowBackIos, ArrowForwardIos } from '@mui/icons-material'; type CryptoPrimitive = keyof typeof cryptoDictionary +type CryptoAssetEntry = { + "Quantum Threat": string; + Mitigation: string; +}; + +type CryptoAssetMap = { + [key: string]: CryptoAssetEntry; // index signature +}; + +const cryptoAsset = rawCryptoAsset as CryptoAssetMap; + + export const fetchJsonData = async (link: any, setJsonData: any, defaultJson?: any) => { try { const response = await fetchJsonReport(link, defaultJson); @@ -522,6 +536,8 @@ const TABLE_HEAD = [ }, { id: 'Primitive', label: 'Primitive', alignRight: false }, { id: 'Location', label: 'Location', alignRight: false }, + { id: 'Quantum Threat', label: 'Quantum Threat', alignRight: false }, + { id: 'Mitigation', label: 'Mitigation', alignRight: false }, ]; type BubbleData = { @@ -946,6 +962,52 @@ const SortedLegend = ({ ); }; +const interpolate = (template: string, context: Record) => { + return template.replace(/\$\{(\w+)\}/g, (_, key) => + context[key] !== undefined && context[key] !== null ? context[key] : 'unknown' + ); +}; + +const getBaseName = (str: string) => + str.split('@')[0] || str; + +const getMatchKey = (name: string, cryptoGraphyAsset: any) => { + const baseName = getBaseName(name).toLowerCase(); + return ( + Object.keys(cryptoGraphyAsset).find( + (key) => key.toLowerCase() === baseName + ) || 'Unspecified' + ); +}; + +const renderThreatInfo = (row: any, cryptoGraphyAsset: any) => { + const props = row.cryptoProperties || {}; + const algProps = props.algorithmProperties || {}; + const relProps = props.relatedCryptoMaterialProperties || {}; + const primitive = algProps.primitive || relProps.type || ''; + const curve = algProps.curve || ''; + const keySize = algProps.parameterSetIdentifier || 'unknown'; + const usage = (algProps.cryptoFunctions || []).join(', ') || ''; + + const matchKey = getMatchKey(row.name, cryptoGraphyAsset); + const threatInfo = cryptoGraphyAsset[matchKey]; + + const context = { keySize, curve, usage, primitive }; + if (matchKey === "Unspecified") { + return { + threat: "Quantum threat unknown or not assessed.", + mitigation: "Review cryptographic asset for quantum-safe alternatives.", + isKnown: false + }; + } + + return { + threat: interpolate(threatInfo["Quantum Threat"], context), + mitigation: interpolate(threatInfo["Mitigation"], context), + isKnown: true + }; +}; + const CryptographyModal = ({ cryptography }: any) => { const cryptoPrimitivesData = generateCryptoStats(cryptography); const cryptoFunctionsData = generateCryptoFunctionsData(cryptography); @@ -1172,9 +1234,10 @@ const CryptographyModal = ({ cryptography }: any) => { (occurrence: any) => ({ name: component.name.toUpperCase(), primitive: - component.cryptoProperties?.algorithmProperties?.primitive.toUpperCase() || - 'Unspecified', + component.cryptoProperties?.algorithmProperties?.primitive.toUpperCase() || + 'Unspecified', filename: `${occurrence.location.split('/').pop()}:${occurrence.line}`, + cryptoProperties: component.cryptoProperties, }) ) ) @@ -1182,20 +1245,27 @@ const CryptographyModal = ({ cryptography }: any) => { page * rowsPerPage, page * rowsPerPage + rowsPerPage ) // <-- Apply pagination here - .map((row: any, index: any) => ( - + .map((row: any, index: any) => { + const threat = renderThreatInfo(row, cryptoAsset); + return ( { row.name }
{ row.primitive }
{ cryptoDictionary?.[ - row.primitive.toLowerCase() as CryptoPrimitive + row.primitive.toLowerCase() as CryptoPrimitive ]?.fullName || '' }
{ row.filename } - - )) } + + { threat.threat } + + + { threat.mitigation } + + ); + }) } Date: Tue, 8 Jul 2025 18:04:03 +0530 Subject: [PATCH 2/2] Added Quantum Threat and Mitigation in Cbom (#729) --- src/pages/BesVersionHistory/AssessmentReport/index.tsx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/pages/BesVersionHistory/AssessmentReport/index.tsx b/src/pages/BesVersionHistory/AssessmentReport/index.tsx index bfe97319..a25e8a86 100644 --- a/src/pages/BesVersionHistory/AssessmentReport/index.tsx +++ b/src/pages/BesVersionHistory/AssessmentReport/index.tsx @@ -1003,7 +1003,7 @@ const renderThreatInfo = (row: any, cryptoGraphyAsset: any) => { return { threat: interpolate(threatInfo["Quantum Threat"], context), - mitigation: interpolate(threatInfo["Mitigation"], context), + mitigation: interpolate(threatInfo.Mitigation, context), isKnown: true }; };