Cryptographic Asset Discovery and Inventory Market Survey

This report presents a study on commercially available tools for cryptographic asset discovery and inventory (CADI). The objective of the study is to create an overview of all cryptography utilized within organizations, which is crucial for security, especially in light of the transition to post-quantum cryptography (PQC). The research involved workshops with technical and policy stakeholders and structured interviews with product providers. Findings indicate significant variations in CADI tools regarding technical specifications and product maturity. The report outlines the necessity for proper alignment of CADI with existing IT asset management solutions and emphasizes the importance of integrating operational technology (OT) into CADI practices. Recommendations include fostering collaboration among stakeholders, initiating knowledge accumulation regarding cryptographic assets, and encouraging the development of effective CADI tools. The study is relevant to government bodies and may also benefit public and private organizations seeking to enhance their cryptographic asset management.