Sebastien Rousseau
Tuntube mu ›

CRYPTOGRAPHIC BILL OF MATERIALS

Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna

Karatun injiniya ga CTO na bankuna da shugabannin security architecture: wa'adin post-quantum na farko ba wa'adin ƙaura ba ne sai dai wa'adin discovery, kuma asset register na ICT da DORA ya riga ya tilasta muku ajiyewa yana rubuta komai game da asset sai dai cryptography da ke cikinsa.

11 minti karatu
Banner for: Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna

Ba Za Ka Iya Ƙaura da Abin da Ba Za Ka Iya Ƙidayawa Ba: Cryptographic Bill of Materials ɗin da Bankuna Har Yanzu Ba Su Da Shi

Kowane roadmap na post-quantum a fannin banki yana ɗauka cewa akwai wani inventory da babu shi. An rubuta tsare-tsaren, kwamitocin sa ido suna taruwa, katunan maki suna rawaya. A ƙarƙashin duk wannan akwai zato cewa wani, a wani wuri, zai iya fitar da jerin kowane wuri da bankin ke gudanar da aikin cryptographic — wane algorithm, wane key length, wace library, wace certificate, tana ƙarewa yaushe. Kusan babu wata cibiya da za ta iya. Matakin farko na NCSC ba matakin ƙaura ba ne: matakin discovery ne, wa'adinsa 2028, kuma shi ne wanda babu wanda ya ƙididdige kuɗinsa.

Taƙaitawa ga Shugabanni

  • Jerin shi ne discovery, sannan agility, sannan ƙaura. Jagorar NCSC ta sanya matakin discovery bayyananne a 2028, ƙaura mafi muhimmanci a 2031 da kammalawa nan da 2035. Cibiyar da ta fara ƙaura kafin ta ƙidaya za ta ƙaurar da tsarin da ta sani kawai.
  • Register ɗin da kuke da shi ba ya amsa tambayar da kuke fuskanta yanzu. DORA Article 8 yana buƙatar cibiyoyin kuɗi su gano, su rarraba kuma su rubuta ICT assets tare da tsara dogaronsu a tsakaninsu. Bai buƙaci ko sifa ɗaya ta cryptographic ba, don haka register da ya bi Article 8 zai iya zama cikakke amma har yanzu marar amfani ga tsara crypto-agility.
  • Ma'aunin ya riga ya kasance. Cryptographic assets — algorithms tare da key size, mode da curve; maɓallai; certificates; protocols — ana iya wakilta su cikin CycloneDX, wanda aka buga a matsayin ECMA-424. Tambayar schema ce, ba tambayar sayayya ba.
  • Kashi na huɗu mafi wuya ba naku ba ne don yin scanning. Hardware security modules, na'urorin biyan kuɗi, libraries da vendor ya haɗa da masu bayar da SaaS ba za a iya ƙidaya su ta hanyar nuna musu scanner ba. Wannan ɓangare na inventory ana gina shi daga attestation na kwangila, kuma sharaɗin dole ne ya kasance kafin roadmap ya kasance.

Wa'adin da Babu Wanda Ya Ƙididdige Kuɗinsa

Karanta jadawalan ƙaura da aka buga da kyau, sai jerin ya bayyana ba tare da shakka ba. Roadmap na National Cyber Security Centre ya sanya discovery — cikakken hoto na tsarin da sabis ɗin da suka dogara da cryptography — a 2028, aikin ƙaura mafi muhimmanci a 2031, da kammalawa a duk tsarin, sabis da samfura a 2035. Rahoton sauyi na NIST, IR 8547, yana kan hanya mai jituwa: algorithms na public-key da suke quantum-vulnerable, har da RSA da ECC, an janye su bayan 2030 kuma an haramta su bayan 2035.

Yawancin shirye-shiryen banki sun ɗauki 2035 a matsayin ranar. Wannan shi ne ƙarshen jadawalin da bai dace a fara tsarawa daga gare shi ba.

Ranaku biyu sun fi muhimmanci sosai. Ta farko ita ce 2028, domin discovery shi ne shigarwar komai da ke biyowa — ba za ka iya auna girma, ƙididdige kuɗi ko tsara jerin ƙaura a kan mai rabo da ba a sani ba. Ta biyu ita ce 2030, domin "an janye" ba kalma mai laushi ba ce a cibiyar da ake sarrafawa: shi ne lokacin da ci gaba da dogara da algorithm ya zama shawarar da wani dole ne ya sa hannu a kanta.

Tsakanin yau da 2028 akwai ƙasa da watanni talatin. Wannan zagaye ɗaya ne, watakila biyu, na kasafin kuɗi don gina ƙarfin da yawancin cibiyoyi ba su fara ba.

Register ɗinku na DORA Yana Rubuta Komai Sai Cryptography

Ga ɓangaren da ke ba mutane mamaki. Yawancin manyan bankunan Turai sun riga suna kula da inventory na ICT assets mai cikakken bayani, wanda ake bita akai-akai, domin DORA ya tilasta musu.

Article 8 na Regulation (EU) 2022/2554 yana buƙatar cibiyoyin kuɗi su gano, su rarraba kuma su rubuta yadda ya dace duk ayyukan kasuwanci da ICT ke tallafa wa, bayanan da ICT assets da ke tallafa musu, da matsayinsu da dogaronsu dangane da haɗarin ICT — da kuma tsara configuration na waɗannan assets da alaƙar da ke tsakaninsu, tare da ci gaba da bita.

Wannan inventory ne mai muhimmanci. Amma kuma ba shi da siffar da wannan matsala ke buƙata.

Tebur 1: Register ɗin da kuke da shi, da register ɗin da matakin 2028 ke buƙata

Tambaya Asset register na ICT (DORA Article 8) Cryptographic inventory (CBOM)
Wane asset ne wannan kuma wa ke da shi? Eh — wannan shi ne ainihin register ɗin Ba manufarsa ba
Yaya muhimmancinsa yake, kuma a kan me yake dogara? Eh — rarrabawa da tsara dogaro An gada daga asset register
Wane algorithms yake amfani da su, kuma a ina? A'a Eh — kowane component, tare da key size, mode da curve
Wace library ce ke aiwatar da su, a wane version? Wani ɓangare, ta hanyar SBOM idan akwai shi Eh, a matsayin dangantaka bayyananna
Wace certificate yake gabatarwa, tana ƙarewa yaushe? Da wuya, kuma yawanci a wani kayan aiki na PKI daban Eh
Ina maɓallan suke zaune, kuma yaya ake kare su? A'a Eh — har da ko akwai HSM a kan hanya
Shin wannan asset ɗin quantum-vulnerable ne? Ba za a iya samo shi ba Ana amsawa kai tsaye

Layin ƙarshe shi ne dukan hujjar. Cibiya na iya bin Article 8 gaba ɗaya, ta wuce binciken da aka yi mata, kuma har yanzu ba ta iya amsa "tsarinmu nawa ne za su lalace a 2030" ba tare da fara aikin discovery daga tushe ba.

Wannan ba suka ce ga DORA ba. An rubuta Article 8 don amsa tambayoyin juriya da tattaruwa, kuma yana amsa su da kyau. Kawai ba a rubuta shi don amsa tambayar cryptographic-agility ba, kuma ya kamata a haɗa register ɗin biyu maimakon a gudanar da su a matsayin takardu daban da ƙungiyoyi daban ke da su.

Abin da CBOM ke Ƙunshe da Shi da Gaske

Cryptography Bill of Materials inventory ne na hukuma na cryptographic assets a cikin wani tsari — algorithms, maɓallai, certificates da protocols, da alaƙarsu da software components ɗin da ke amfani da su.

Muhimmin abu game da tsarinsa shi ne cewa ba sabon tsarin fayil ba ne. An ba da gudummawar tallafin cryptographic asset cikin CycloneDX, ƙayyadaddun bill-of-materials da OWASP ke tallafa wa, wanda aka buga a matsayin ma'aunin Ecma International, ECMA-424. Saboda haka CBOM takardar CycloneDX ce da aka cika filayen cryptography a cikinta. Yana tabbatarwa da schema iri ɗaya, yana motsawa ta cikin pipelines iri ɗaya, kuma yana sauka a rijistar artefact iri ɗaya da SBOMs ɗin da cibiya ta riga take samarwa don dalilan sarƙar samarwa.

Wannan ya fi muhimmanci fiye da yadda yake ji. Bambanci tsakanin ma'aunin da ke tafiya da ma'aunin da ke tsayawa yawanci shi ne ko yana buƙatar sabon shimfiɗa. Wannan bai buƙata ba.

Tebur 2: Nau'ikan asset na CBOM da tambayar ƙaura da kowanne ke amsawa

Nau'in asset Abin da ake rubutawa Tambayar da yake amsawa
Algorithm Primitive, key size, mode, curve, padding, da aikin da yake yi Wanne daga cikin ayyukanmu ne quantum-vulnerable, kuma a wane ƙarfin parameter?
Key Nau'i, girma, tsari, yanayi, da inda kayan maɓallin suke Wane maɓalli ne HSM ke karewa kuma wanne ne yake zaune a memory na aikace-aikace?
Certificate Subject, issuer, algorithm ɗin sa hannu, tagar inganci Me zai ƙare kafin tagar ƙaura, kuma me aka sa hannu da algorithm da aka janye?
Protocol Protocol da version, tare da cipher suites da ake bayarwa Me ake tattaunawa da gaske a kan waya, sabanin abin da fayil ɗin configuration ke iƙirari?
Related component Library, version da wurin code da ke aiwatar da abin da ke sama Idan aka maye gurbin wannan library, me kuma zai motsa tare da ita?

Layin ƙarshe shi ne wanda ke mayar da inventory ya zama shiri. Jerin algorithms yana gaya maka girman matsalar. Jerin algorithms da aka haɗa da components ɗin da ke aiwatar da su yana gaya maka siffar aikin — kuma daga wannan ne ake gina jerin ƙaura da gaske.

Discovery Matsaloli Huɗu Ne, Ba Ɗaya Ba

Ɗaukar discovery a matsayin aiki guda ɗaya ita ce hanyar da wa'adannan shirye-shirye suka fi gazawa da ita. Matsaloli huɗu ne daban da kayan aiki huɗu daban, masu su huɗu daban, da matakan tabbaci mabambanta sosai.

1. Source code — abin da code ɗin ke nema. Nazarin static a kan repositories ɗinku yana gano kiran cryptographic, parameters da aka ƙulla a cikin code da libraries da ake kira. Akwai kayan aiki na budaddiyar hanya: aikin CBOMkit da plugin ɗinsa na SonarQube suna gano cryptographic assets a cikin source kuma suna fitar da CycloneDX. Tabbaci mafi ƙarfi, ɗaukar hoto mafi ƙunci — yana ganin code ɗin da kuka rubuta kuma har yanzu kuke build ɗinsa kawai.

2. Binaries da containers — abin da ke tafiya da gaske. Nazarin source yana rasa duk abin da aka jawo a matsayin dependency da aka compile ko aka gasa cikin base image. Scanning na container da filesystem yana rufe wani ɓangare na wannan gibi. Ku yi tsammanin ra'ayoyin biyu za su saɓa; saɓanin kansa binciken ne.

3. Network — abin da ake tattaunawa da gaske. Configuration niyya ce, ba lura ba. Lura mai natsuwa da tattaunawar TLS kai tsaye a duk kadarorin ita ce hanya ɗaya tilo da za ku gano cewa sabis ɗin da ya rubuta TLS 1.3 har yanzu yana karɓar wani abu mai tsufa daga wani abokin hulɗa na cikin gida da bai taɓa haɓakawa ba. A kadarorin biyan kuɗi, wannan abokin hulɗa shi ne wanda ya fi muhimmanci sau da yawa.

4. Kadarorin vendor da hardware — abin da ba za ku iya scanning ɗinsa ko kaɗan ba. Hardware security modules, na'urorin biyan kuɗi, na'urorin network, tsarin ƙasa na mainframe, da kowane mai bayar da SaaS a cikin sarƙar. Babu scanner da ya kai su. Ana ƙidaya wannan kashi ta hanyar tambaya, ƙarƙashin kwangila, kuma a nan ne haɗarin gaske na wholesale banking ke tattaruwa, domin tsarin da ke share hisabi da tsayar da biya galibi vendor ne ke samar da su.

Na huɗu shi ne wanda ya kamata a fara yanzu, domin yana da lokacin jira mafi tsawo kuma ba aikin injiniya ba ne. Aikin sayayya ne: shigar da sharaɗin bayyana cryptographic da crypto-agility cikin kwangilar, da cikin samfurin sabuntawa, don nan da 2028 amsar ta iso a matsayin wajibin mai bayarwa maimakon tagomashi. Kowane kwata da wannan sharaɗi ba ya cikin samfurin kwata ne na sabuntawa da za a sake buɗe su daga baya.

Mayar da Shi Control Maimakon Aiki na Ɗan Lokaci

Hanyar gazawar da zan sa kuɗi a kanta ba ita ce bankuna sun tsallake inventory ba. Ita ce sun ba da umarnin yin sa sau ɗaya, sun isar da hoton da za a iya karewa a 2028, sannan suka bar shi ya lalace — domin an ba shi kuɗi a matsayin abin da aikin post-quantum ya isar maimakon a gina shi a matsayin control da ake kula da shi.

Cryptographic inventory yana lalacewa da sauri fiye da asset register. Certificates suna juyawa. Ana ɗaga libraries ta hanyar sarrafa dependency ta atomatik. Base image yana canzawa sai wani cikakken sabis ya samu wani TLS stack daban a shiru. Hoton da aka ɗauka a 2028 zai zama kuskure sosai nan da 2029, wanda shi ne ainihin lokacin da aikin tsara fifiko na 2031 zai dogara da shi.

Alƙawura uku suna hana wannan.

Ka samar da shi a cikin pipeline, ba a cikin bincike na tambayoyi ba. Ya kamata build ɗin ya fitar da CBOM, tare da SBOM, kuma a ajiye shi a matsayin artefact mai version dangane da release. Inventory da aka tara ta hanyar aika wa masu aikace-aikace takardar tambayoyi ta imel ya riga ya tsufa lokacin da ya iso kuma ba za a iya diff ɗinsa ba.

Ka yi diff ɗinsa, kuma ka yi gargaɗi a kan diff ɗin. Siginar da take da amfani ba inventory ba ne; sauyin da ya faru a inventory ne. Sabis ɗin da ya samu sabon dogaron cryptographic, certificate da ya gajarta, algorithm da ya bayyana inda bai kasance ba a baya — waɗannan su ne abubuwan da suka cancanci control. Wannan shi ne dalili guda da ya sa diff ɗin SBOM ya fi ajiye SBOM amfani.

Ka haɗa shi da register ɗin da kuke ajiyewa. CBOM yana amsa "wace cryptography"; register na Article 8 yana amsa "yaya muhimmanci, na wa, kuma me ke dogara da shi". Babu ɗayansu da ke zama fifiko shi kaɗai. Idan aka haɗa su, suna samar da matsayi guda da ke da muhimmanci: ayyukan da suke quantum-vulnerable da aka jera bisa muhimmancin aikin kasuwanci da ke zaune a kansu. Wannan haɗin shi ne ainihin abin da shirin discovery ke isarwa, kuma ya cancanci a ambace shi haka a cikin shirin.

Littafin Aiki

  1. Sake tsara matakin 2028 a matsayin ƙarfi, ba rahoto ba. Abin da za a isar shi ne inventory da ake kula da shi, wanda inji zai iya karantawa kuma yana sake samar da kansa, ba takarda da aka fitar sau ɗaya ga mai kula ba.
  2. Ka fitar da CBOMs daga build ɗin yanzu, a kan sabbin sabis da farko. Kada ku yi ƙoƙarin ɗaukar duk kadarorin a zango ɗaya. Ku haɗa shi da pipeline don duk abin da ake gina shi ko ake canza shi sosai a wannan shekara, don ɗaukar hoto ya ƙaru maimakon ya buƙaci kamfe.
  3. Ku sanya sharaɗin kwangila cikin samfurin sabuntawa a wannan kwata. Bayyana cryptographic da alƙawarin crypto-agility. Wannan yana da lokacin jira mafi tsawo a cikin jerin kuma bai dogara da wata shawarar kayan aiki ba.
  4. Ku gudanar da lura da network a kan hanyoyin biya da tsayar da hisabi da farko. A nan ne gibin da ke tsakanin configuration da gaskiya ke yin barna mafi girma kuma inda abokan hulɗa na tsofaffin tsarin ke tattaruwa.
  5. Ku haɗa CBOM da register na Article 8 kuma ku jera bisa haɗin. Ku buga jerin da aka tsara. Shi ne artefact ɗin da ke mayar da inventory na injiniya ya zama tattaunawar allon gudanarwa game da jeri da kuɗi.
  6. Ku yi diff a kowace sabuntawa kuma ku yi gargaɗi a kan sabbin dogaro masu quantum-vulnerable. Inventory ba tare da diff ba ma'ajiya ce.

Cibiyoyin da za su isa 2031 cikin nutsuwa ba su ne waɗanda suka fi kowa fahimtar ML-KEM ba. Su ne waɗanda za su iya amsawa, a kowace safiya kuma ba tare da ba da umarnin fara wani aiki ba, tambayar inda cryptography ɗinsu take da gaske.

Tambayoyin da Ake Yawan Yi

Shin CBOM abu ne daban da SBOM?
Nau'in takarda ɗaya ne da aka cika filaye daban a cikinsa. An shigar da tallafin cryptographic asset cikin CycloneDX, wanda aka buga a matsayin ECMA-424, don haka CBOM yana tabbatarwa da schema iri ɗaya kuma yana motsawa ta cikin kayan aiki iri ɗaya da SBOM. Cibiyoyin da suka riga suke samar da SBOMs sun fi kusa da wannan fiye da yadda suka saba tsammani.

Shin DORA yana buƙatar cryptographic inventory?
Ba a waɗannan kalmomi ba. Article 8 na Regulation (EU) 2022/2554 yana buƙatar ganowa, rarrabawa da rubuta ICT assets da tsara configuration ɗinsu da dogaronsu a tsakaninsu. Sifofin cryptographic ba sa cikin abubuwan da yake tilasta muku rubutawa, wanda shi ya sa register da ya bi Article 8 ba zai iya amsa tambayar quantum-vulnerability ba sai an faɗaɗa shi.

Me ya sa discovery ke buƙatar ƙarewa da nisa kafin ƙaura?
Domin shi ne shigarwar tsara fifiko. Jagorar NCSC ta sanya discovery a 2028 da ƙaura mafi muhimmanci a 2031 daidai don a samu tazara bayyananna da za a jera kadarorin a cikinta a kuma tsara aikin. Matse su biyu yana nufin ƙaurar da abin da aka fi fahimta maimakon abin da ya fi muhimmanci.

Yaya za mu ƙidaya cryptography a cikin hardware na vendor da SaaS?
Ba ku scanning ɗinsa; kuna buƙatar bayyanawa. Dole ne wajibin bayyana cryptographic da crypto-agility na kwangila ya rufe hardware security modules, na'urorin biyan kuɗi da masu bayar da sabis. Tunda wannan ya dogara da zagayen sabuntawa maimakon ƙoƙarin injiniya, yana da lokacin jira mafi tsawo a duk shirin kuma ya kamata ya fara da farko.

Shin ya kamata mu jira kayan aiki su balaga kafin mu fara?
A'a, kuma gardamar kayan aiki galibi wakili ce ta gardamar kasafin kuɗi. Aiwatarwar budaddiyar hanya sun riga suna fitar da cryptographic inventories na CycloneDX daga source da daga container images, kuma ƙayyadaddun ma'auni ne da aka tabbatar. Ƙuntatawar da ke kan matakin 2028 ita ce faɗin ɗaukar hoto da isar kwangila, ba samuwar kayan aiki ba.

Nassoshi

Bita ta ƙarshe .

Sake buga wannan labarin

Kwafa tsarin Medium

# Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau

> Originally published at [https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/](https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/)

Wa'adin discovery na NCSC a 2028 yana zuwa kafin kowane wa'adin ƙaura. Bankuna ba za su cim ma shi ba, domin asset register na DORA bai rubuta cryptography ba.

Read the full article on sebastienrousseau.com: https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/

Kwafa tsarin Mastodon

Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau

Wa'adin discovery na NCSC a 2028 yana zuwa kafin kowane wa'adin ƙaura. Bankuna ba za su cim ma shi ba, domin asset register na DORA bai rubuta cryptography ba.

https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/

Kwafa an tsara don LinkedIn

Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau

Wa'adin discovery na NCSC a 2028 yana zuwa kafin kowane wa'adin ƙaura. Bankuna ba za su cim ma shi ba, domin asset register na DORA bai rubuta cryptography ba.

Ga abubuwan da ya kamata a lura da su na dabarun:

- Wa'adin da Babu Wanda Ya Ƙididdige Kuɗinsa. Karanta jadawalan ƙaura da aka buga da kyau, sai jerin ya bayyana ba tare da shakka ba.
- Register ɗinku na DORA Yana Rubuta Komai Sai Cryptography. Ga ɓangaren da ke ba mutane mamaki.
- Abin da CBOM ke Ƙunshe da Shi da Gaske. Cryptography Bill of Materials inventory ne na hukuma na cryptographic assets a cikin wani tsari — algorithms, maɓallai, certificates da protocols, da alaƙarsu da software components ɗin da ke amfani da su.
- Discovery Matsaloli Huɗu Ne, Ba Ɗaya Ba. Ɗaukar discovery a matsayin aiki guda ɗaya ita ce hanyar da wa'adannan shirye-shirye suka fi gazawa da ita.

Menene hanyar ƙungiyar ku wajen magance ƙalubalen da aka kawo a wannan rubuce-rubucen?

→ https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/

#CryptographicBillOfMaterials #Cbom #Cyclonedx #Ecma424 #CryptographicInventory

Sebastien Rousseau | CC-BY-4.0
Buga wannan labari

Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau

Wa'adin discovery na NCSC a 2028 yana zuwa kafin kowane wa'adin ƙaura. Bankuna ba za su cim ma shi ba, domin asset register na DORA bai rubuta cryptography ba.

BibTeX

@online{rousseau2026ƙaura,
  author  = {Rousseau, Sebastien},
  title   = {{Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau}},
  year    = {2026},
  url     = {https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/},
  urldate = {2026}
}

RIS

TY  - GEN
AU  - Rousseau, Sebastien
TI  - Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau
PY  - 2026
UR  - https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/
ER  -

Vancouver

Rousseau S. Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau. sebastienrousseau.com. 2026 Jul 28. Available from: https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/

Chicago

Rousseau, Sebastien. "Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau." sebastienrousseau.com. July 28, 2026. https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/.

APA

Rousseau, S. (2026, July 28). Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau. sebastienrousseau.com. https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/

Sake buga wannan labari

Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau

Wa'adin discovery na NCSC a 2028 yana zuwa kafin kowane wa'adin ƙaura. Bankuna ba za su cim ma shi ba, domin asset register na DORA bai rubuta cryptography ba.

An lasisin wannan labari a karkashin Creative Commons Attribution 4.0 International. Sake bugawa na bukatar nuna asalin URL na asali.

Ƙaura Ba Ta Yiwuwa Ba Tare da Ƙidayar Cryptography: CBOM ɗin Bankuna — Sebastien Rousseau

Wa'adin discovery na NCSC a 2028 yana zuwa kafin kowane wa'adin ƙaura. Bankuna ba za su cim ma shi ba, domin asset register na DORA bai rubuta cryptography ba.

Originally published at https://sebastienrousseau.com/ha/2026-07-28-cryptographic-bill-of-materials-cbom-discovery-banks-2026/ by Sebastien Rousseau.
Licensed under CC-BY-4.0.

SEBASTIEN ROUSSEAU FOUNDER · ENGINEER