CBOM padlock icon

Cryptographic Bill of Materials (CBOM) Extractor

CSV Parsing → Table Input  ·  100% Client-Side Parsing. No backend, no database, no data retention.
Created by @aaronamran  ·  Credits to @msaufyrohmad for the Python scan scripts and NACSA for the initiative.
"I choose a lazy person to do a hard job. Because a lazy person will find an easy way to do it." - Bill Gates
⚠ Results depend on CSV scan quality and software name matching accuracy. Always manually review output before including in official compliance reports.

① Extract CSV Files

Use one of the methods below to extract cryptographic scan CSV files from your target system.

Method 1 - Shell Script (Linux only)
  1. Copy-paste the script from pqccheck.sh into a text editor in your Linux terminal and save it as pqccheck.sh.
  2. Run chmod +x pqccheck.sh to make it executable.
  3. Run the script via ./pqccheck.sh to generate the CSV scan files.
  4. If you access the Linux machine via SSH from Windows, transfer the CSV files using tools like WinSCP to your local machine.
Method 2 - PowerShell Script (Windows only)
  1. Copy-paste the script from swversion.ps1 into a text editor and save it as swversion.ps1.
  2. Copy-paste the script from pqccheck.ps1 into a text editor and save it as pqccheck.ps1.
  3. Open PowerShell and run Set-ExecutionPolicy Bypass -Scope Process -Force to allow script execution.
  4. Run the script .\swversion.ps1 to get a list of installed softwares to be added as Software Components in the next section and run .\pqccheck.ps1 to generate the CSV scan files.
Method 3 - Python Scripts (Linux & Windows)

Download or clone the CBOM-scanning repository by @msaufyrohmad and run the individual Python scripts to generate the CSV output files.

② Software Components

📋 Paste from Excel
Paste each column separately from Excel. Prefix Numbers: one number per line (e.g. 83.1). Software Components: one name per line. Rows are matched by position — counts don't need to match (missing prefixes will be left blank).

Enter each software name/version to search for in the scan CSVs.

③ Drag and Drop CSV Files

Drag and drop any combination of: binaries_at_disk.csv, binaries_used.csv, library.csv, kernel_modules.csv, exec_script.csv, web_app.csv, network_app.csv, crypto_cert_key.csv from your local machine.

📂

Click or drag & drop CSV files here

Multiple files & folders supported

Processing…

CBOM Results

How to use: Each row below maps to one line in your CBOM table. Copy the Cryptographic Primitive, Algorithm, Key Length, Purpose/Usage, and Crypto Library columns directly.
# Component / Version Sub-component / Path Cryptographic Primitive Algorithm Key Length Purpose / Usage Crypto Library Data Category Source File