search

crocs-muni / sec-certs

Tool for analysis of security certificates and their security targets (Common Criteria, NIST FIPS140-2...).
https://sec-certs.org
MIT License
9 stars 7 forks source link

Build a graph of FIPS algorithm references #277

Open J08nY opened 1 year ago

J08nY commented 1 year ago

The idea:

image

This might mean some changes in the ReferenceFinder class but honestly just building something up in a notebook first is probably the right way. The first step is to get a proper dataset of FIPS algorithms with the certificates that mention a given algorithm, this should be split by the different sources of algorithm mentions (web and PDF). The PDF ones should be cleaned first however, as the raw ones may contain lots of BS.

J08nY commented 1 year ago

This is connected to the effort in #275 but only slightly. Some of the cleanup will be required here. It can happen here and be merged there or the other way around.

adamjanovsky commented 1 year ago

Actually, @GeorgeFI will revisit FIPS references and conduct their analysis. If @J08nY agrees, could we pls assign him with this? It seems like a subtask of the overall FIPS reference analysis.

J08nY commented 1 year ago

Makes sense!