Post quantum cryptography migration management

1 . A system, comprising:

a computing device comprising a processor and a memory; and

machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:

identify a uniform resource location associated with source code for an application service;

identify a cryptographic primitive in the source code by scanning the source code;

generate a large language model prompt for a cryptographic bill of materials based at least in part on the cryptographic primitive, wherein the cryptographic bill of materials comprises a cryptographic readiness score, the cryptographic readiness score indicating a preparedness for an encryption attack from a quantum computing system; and

generate the cryptographic bill of materials for the source code by inputting the large language model prompt to a large language model application, the cryptographic bill of materials comprising a list of cryptographic components and cryptographic properties, the large language model application being trained to identify a plurality of cryptographic properties for a software application.

2 . The system of claim 1 , wherein generating the large language model prompt further cause the computing device to at least generate a chain-of-thought prompt, wherein the chain-of-thought prompt includes a sequence of instructions for generating the cryptographic bill of materials.

3 . The system of claim 2 , wherein the chain-of-thought prompt comprises a plurality of example cryptographic properties to identify in the source code, wherein the plurality of example cryptographic properties are generated based at least in part on the cryptographic primitive.

4 . The system of claim 2 , wherein the chain-of-thought prompt comprises an instruction for a data format for the cryptographic bill of materials.

5 . The system of claim 1 , wherein the cryptographic bill of materials comprises a dependency type associated with the cryptographic primitive.

6 . The system of claim 1 , wherein the source code is scanned using a cryptographic primitive crawler.

7 . The system of claim 6 , wherein the cryptographic primitive crawler is at least one of a web site crawler, an application programming interface endpoint crawler, or a code repository crawler.

8 . The system of claim 1 , wherein the generation of the large language model prompt comprises retrieving a set of LLM instructions associated with the cryptographic primitive.

9 . A method, comprising:

identifying a uniform resource location associated with source code for an application service;

identifying a cryptographic primitive in the source code by scanning the source code;

generating a large language model prompt for generating cryptographic bill of materials based at least in part on the cryptographic primitive, wherein the cryptographic bill of materials comprises a cryptographic readiness score, the cryptographic readiness score indicating a preparedness for an encryption attack from a quantum computing system; and

generating the cryptographic bill of materials for the source code by inputting the large language model prompt to a large language model application, the cryptographic bill of materials comprising a list of cryptographic components and cryptographic properties, the large language model application being trained to identify a plurality of cryptographic properties in a software application.

10 . The method of claim 9 , wherein generating the large language model prompt further comprises generating a chain-of-thought prompt, wherein the chain-of-thought prompt includes a sequence of instructions for generating the cryptographic bill of materials.

11 . The method of claim 10 , wherein the chain-of-thought prompt comprises a plurality of example cryptographic properties to identify in the source code, wherein the plurality of example cryptographic properties are generated based at least in part on the cryptographic primitive.

12 . The method of claim 10 , wherein the chain-of-thought prompt comprises an instruction for a data format for the cryptographic bill of materials.

13 . The method of claim 9 , wherein the cryptographic bill of materials comprises a dependency type associated with the cryptographic primitive.

14 . The method of claim 10 , wherein the source code is scanned using at least one of: a web site crawler, an application programming interface endpoint crawler, or a code repository crawler.

15 . The method of claim 9 , wherein generating of the large language model prompt comprising retrieving a set of LLM instructions associated with the cryptographic primitive.

16 . A system, comprising:

a computing device comprising a processor and a memory; and

machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:

identify an access request for a networked resource from an application service;

identify a web interface for the application service based at least in part on using a threat modeling service to identify that the web interface meets a cryptographic threshold;

generate a cryptographic bill of materials for the web interface by executing a cryptographic scanner for source code associated with the web interface, the cryptographic scanner using a large language model application to generate the cryptographic bill of materials based at least in part on a cryptographic primitive identified in the source code, the cryptographic bill of materials comprising a cryptographic score that characteristics a level of post quantum cryptography conversion for the web interface; and

grant the access request for the application service to access the networked resource based at least in part on the cryptographic score from the cryptographic bill of materials meeting a threshold.

17 . The system of claim 16 , wherein the threat modeling service is a smart contract executed in a private blockchain.

18 . The system of claim 16 , wherein the access request is granted by a governance smart contract executed in a private blockchain.

19 . The system of claim 16 , wherein generating the cryptographic bill of materials cause the computing device to at least format data elements of the cryptographic bill of materials in a JavaScript Object Notation (JSON) file format.

20 . The system of claim 16 , wherein the cryptographic bill of materials comprises a list of cryptographic components and cryptographic properties.