add parameter list keys

[stevenc-stb]

We can add a parameter per crypto-algorithms in the list for use parameter for the key name in DictionaryEntry[] in the SPDX document.
ex.
for AES
parameter:

• KeySize: This is the key size of algorithm
• Mode: ex , ECB,CBC,OFB,CFB,wrap,GCM,CCM,wrap-pad

[toscalix]

If I understand correctly, AES would end up, as example:

id: aes
name: Advanced Encryption Standard
cryptoClass: Symmetric-Key-Algorithm/Block-Cipher
commonkeySize: '256'
specifiedkeySize: [min:'128', max:'256']
parameter:
    KeySize: '168'
    Mode: ECB

Am I correct?

[stevenc-stb]

in this list no, in the algorithms the parameter list it will have all parameter options that can happen to the algorithm. Not just one setup of the algorithm. AES has more modes than just ECB - Mode: ex , ECB,CBC,OFB,CFB,wrap,GCM,CCM,wrap-pad this will have all the modes.

[toscalix]

commonkeySize is the key size detected for that algorithm. Wouldn't that be the same that the keySize you mention in your example? In other words: is commonKeySize and keySize the same?

[toscalix]

I have been checking the potential parameters that describe configuration options for a cryptographic algorithm. I got these ones:

1. KeySize: we already have this one defined as specifiedkeySize including all the possibilities and commonkeySize as the one detected, that is, the one that the algorithm has.

The ones below we do not have them defined

2. Mode: Definition: Mode defines how a block cipher processes data that is larger than a single block. It specifies the method for applying the block cipher algorithm repeatedly to encrypt or decrypt multiple blocks of data while maintaining security properties.
   Values: Common modes include ECB (Electronic Codebook), CBC (Cipher Block Chaining), CFB (Cipher Feedback), OFB (Output Feedback), CTR (Counter), GCM (Galois/Counter Mode), CCM (Counter with CBC-MAC), XTS (for disk encryption), KW (Key Wrap), and KWP (Key Wrap with Padding). Each mode has different security characteristics and use cases.
3. IVSize (Initialization Vector Size):
   Definition: IVSize specifies the length of the initialization vector (IV) or nonce used to randomize the encryption process, measured in bits. The IV ensures that encrypting the same plaintext multiple times produces different ciphertexts, preventing pattern recognition attacks.
   Values: Common IV sizes include 128 bits (CBC mode for AES), 96 bits (recommended for GCM), 64 bits (CBC mode for DES/3DES), and variable lengths depending on the mode and algorithm. Some modes like ECB do not use an IV.
4. BlockSize:
   Definition: BlockSize specifies the fixed length of data blocks that the cipher processes in a single operation, measured in bits. The block cipher divides input data into blocks of this size for encryption or decryption.
   Values: Common block sizes include 64 bits (DES, 3DES, Blowfish), 128 bits (AES, Camellia, ARIA), and 256 bits (Threefish). Modern ciphers typically use 128-bit blocks as the standard.
5. TagSize (for authenticated encryption modes only):
   Definition: TagSize specifies the length of the authentication tag generated by authenticated encryption modes, measured in bits. The authentication tag provides integrity verification and authenticity assurance for both the ciphertext and associated authenticated data.
   Values: Common tag sizes include 96 bits, 104 bits, 112 bits, 120 bits, and 128 bits (GCM), 32 bits to 128 bits in multiples of 16 (CCM), and 128 bits (EAX, OCB). The tag size affects both security level and overhead.
6. PaddingScheme:
   Definition: PaddingScheme specifies the method used to fill incomplete data blocks to match the required block size before encryption. Padding ensures that all data blocks meet the cipher's fixed block size requirement.
   Values: Common padding schemes include PKCS#7 (adds bytes with value equal to padding length), PKCS#5 (subset of PKCS#7 for 8-byte blocks), Zero Padding (adds zero bytes), ANSI X.923 (zeros with length byte), and ISO 10126 (random bytes with length byte). Some modes like CTR and stream ciphers do not require padding.
7. Rounds (if variable):
   Definition: Rounds specifies the number of times the cipher's internal transformation function is applied to the data during encryption or decryption. More rounds generally increase security but also increase computational cost.
   Values: Common round counts include 10 rounds (AES-128), 12 rounds (AES-192), 14 rounds (AES-256), 16 rounds (DES), 48 rounds (3DES), and 12-16 rounds (Blowfish). Some algorithms have fixed round counts while others allow configuration.

We would need to define them in order to add them to the "parameter" property