Enterprise Cryptographic Discovery & Analysis Tool (ECDAT)
“Future quantum computers will break standard data security, so organizations need to find and list all their current encryption tools right now. You are building a software scanner that crawls source code, libraries, and containers to find encryption flaws, assess quantum risks, and recommend quantum-safe replacements.”
Deconstructed Problem Blueprint
WHAT TO BUILD?
An enterprise-grade Cryptographic Discovery and Analysis Tool (ECDAT) featuring automated scanning engines for code/binaries/containers, a Cryptographic Bill of Materials (CBOM) generator, and an interactive risk analytics dashboard.
WHO IS IT FOR?
Primary beneficiaries and users are Cybersecurity Officers, CISOs, IT/Security Auditors, and National Security Intelligence units (like NTRO) trying to safeguard critical infrastructure against future quantum threats.
WHY DOES IT EXIST?
Organizations use legacy encryption everywhere without central records. When cryptanalytically relevant quantum computers arrive, all sensitive encrypted data will be exposed unless migration happens proactively based on data shelf-life and migration time.
INPUT → PROCESS → OUTPUT ARCHITECTURE PIPELINE
Source code repositories (GitHub/GitLab links), compiled binary files (.exe, .so, .dll), software libraries, container images (Docker), and configuration files.
Static code analysis using regex pattern matching and AST (Abstract Syntax Tree) parsing, signature detection for crypto primitives (RSA, AES, ECC), dependency graph mapping, and Mosca's theorem risk calculation algorithms.
A standardized CBOM (Cryptographic Bill of Materials) report, a quantum risk assessment score, prioritized vulnerability logs, and an interactive web GUI displaying visual graphs of cryptographic assets and migration paths.
CONSTRAINTS
- Must handle massive enterprise codebases and large container images within acceptable scan durations
- High accuracy required to minimize false positives on standard hashing vs sensitive asymmetric encryption
- Must support standardized output formats for CBOM compliance
JURY METRICS
- Scan completion time per megabyte of source code/binary
- Precision and recall in identifying custom or obfuscated cryptographic implementations
- Clarity, interactivity, and actionability of the CBOM analytics dashboard
- Accuracy of Mosca's theorem timeline risk categorization
CORE BOTTLENECK
Accurately detecting hardcoded keys, custom cryptographic wrapper functions, and identifying cryptographic algorithms inside compiled, stripped binary files or heavy container layers without crashing.
Why You Should Choose This PS (Pros)
- Extremely high national security and enterprise relevance aligning with global Post-Quantum Cryptography (PQC) mandates
- Clear, structured deliverables: scanner + CBOM + dashboard UI
- Strong potential for commercialization post-hackathon as a DevSecOps tool
Challenges & Risks to Watch (Cons)
- Deep binary analysis and custom crypto detection can become overly complex for a 36-hour sprint if scope isn't managed strictly
- Crowded domain if teams only build a basic regex-based string grep tool
Recommended Tech Stack & Grand Finale Features
Killer Features to Impress the SIH Jury
View Official SIH 2026 Portal Raw Text▼
A Comprehensive CBOM analytics tool that can scan Source code repositories, binaries, libraries and container images, for assessing risks (due to quantum computers), classifying artefacts and suggesting alternatives: