Automated Cryptographic Bill of Materials (CBOM) Generation

The contract seeks the design and implementation of a system capable of automatically generating structured, machine-readable Cryptographic Bill of Materials (CBOMs) from discovered cryptographic assets. This system must accurately inventory, classify, and document cryptographic components across distributed environments to enable precise risk reporting and strategic planning for post-quantum migration. The output must be standardized and consumable by automated tools used in cybersecurity governance, ensuring alignment with broader DoD cryptographic hygiene and transition objectives. This is a subcontract under the Department of Defense, specifically managed by Niwc Atlantic, with a NAICS code of 541714 indicating it falls under research and development in the physical, engineering, and life sciences. The solicitation was posted on June 30, 2026, with a response deadline of July 8, 2026, at 3:59 a.m. UTC. The work will be performed under the auspices of the DoD and is intended to directly support agency-wide efforts to map, assess, and remediate cryptographic vulnerabilities in preparation for quantum computing threats. No set-aside provisions or specific location details are provided, and the point of contact information is omitted from the published data.