Struct CryptographyMetrics 

pub struct CryptographyMetrics {

    pub total_crypto_components: usize,
    pub algorithms_count: usize,
    pub certificates_count: usize,
    pub keys_count: usize,
    pub protocols_count: usize,
    pub quantum_safe_count: usize,
    pub quantum_vulnerable_count: usize,
    pub weak_algorithm_count: usize,
    pub hybrid_pqc_count: usize,
    pub expired_certificates: usize,
    pub expiring_soon_certificates: usize,
    pub compromised_keys: usize,
    pub inadequate_key_sizes: usize,
    pub weak_algorithm_names: Vec<String>,
    pub algorithms_with_oid: usize,
    pub algorithms_with_family: usize,
    pub algorithms_with_primitive: usize,
    pub algorithms_with_security_level: usize,
    pub certs_with_signature_algo_ref: usize,
    pub keys_with_algorithm_ref: usize,
    pub protocols_with_cipher_suites: usize,
    pub keys_with_state: usize,
    pub keys_with_protection: usize,
    pub keys_with_lifecycle_dates: usize,
    pub certs_with_validity_dates: usize,
}

Cryptographic asset metrics for quantum readiness and crypto hygiene assessment.

Computed from components with component_type == Cryptographic and populated crypto_properties. Returns None for quality score when no crypto components are present (N/A-aware).

Fields

total_crypto_components: usize

Total number of cryptographic-asset components

algorithms_count: usize

Number of algorithm assets

certificates_count: usize

Number of certificate assets

keys_count: usize

Number of key material assets

protocols_count: usize

Number of protocol assets

quantum_safe_count: usize

Algorithms with nistQuantumSecurityLevel > 0

quantum_vulnerable_count: usize

Algorithms with nistQuantumSecurityLevel == 0

weak_algorithm_count: usize

Algorithms flagged as weak/broken (MD5, SHA-1, DES, etc.)

hybrid_pqc_count: usize

Hybrid PQC combiner algorithms

expired_certificates: usize

Certificates past notValidAfter

expiring_soon_certificates: usize

Certificates expiring within 90 days

compromised_keys: usize

Key material in compromised state

inadequate_key_sizes: usize

Symmetric keys < 128 bits or asymmetric keys below recommended minimum

weak_algorithm_names: Vec<String>

Names of weak/broken algorithms found

algorithms_with_oid: usize

Algorithms with an OID identifier

algorithms_with_family: usize

Algorithms with algorithm_family set

algorithms_with_primitive: usize

Algorithms with a recognized primitive (not Other)

algorithms_with_security_level: usize

Algorithms with classical or quantum security level set

certs_with_signature_algo_ref: usize

Certificates with signature_algorithm_ref set

keys_with_algorithm_ref: usize

Keys with algorithm_ref set

protocols_with_cipher_suites: usize

Protocols with at least one cipher suite

keys_with_state: usize

Keys with state tracked

keys_with_protection: usize

Keys with secured_by protection

keys_with_lifecycle_dates: usize

Keys with creation_date or activation_date

certs_with_validity_dates: usize

Certificates with both not_valid_before and not_valid_after

Implementations

impl CryptographyMetrics

pub fn from_sbom(sbom: &NormalizedSbom) -> Self

Compute cryptography metrics from an SBOM.

pub fn has_data(&self) -> bool

Whether any crypto components exist (i.e., CBOM data is present).

pub fn quantum_readiness_score(&self) -> Option<f32>

Percentage of algorithms that are quantum-safe (0-100). Returns None when no algorithms are present: a 0/0 readiness is absence of evidence, not a perfect score, and every renderer shows it as “n/a” rather than a vacuous 100.

pub fn quality_score(&self) -> Option<f32>

Quality score (0-100) based on crypto hygiene. Returns None if no crypto data.

pub fn crypto_completeness_score(&self) -> f32

Crypto completeness: how fully documented are the crypto assets?

pub fn crypto_identifier_score(&self) -> f32

Crypto identifier quality: OID coverage.

pub fn algorithm_strength_score(&self) -> f32

Algorithm strength: penalizes broken/weak/quantum-vulnerable algorithms.

pub fn crypto_dependency_score(&self) -> f32

Crypto dependency references: how well are cert/key/protocol -> algorithm refs resolved?

pub fn crypto_lifecycle_score(&self) -> f32

Crypto lifecycle: merged key management + certificate health.

pub fn pqc_readiness_score(&self) -> Option<f32>

PQC readiness: quantum migration preparedness. Returns None when no algorithms are present — there is nothing to be ready about, so the scorer redistributes this category’s weight (mirroring vulnerability_score) instead of granting a vacuous 100.

pub fn quantum_readiness_pct(&self) -> f32

Percentage of algorithms that are quantum-safe (for overview display).

pub const fn cbom_category_labels() -> [&'static str; 8]

Category labels for CBOM quality chart.

pub const fn cbom_category_names() -> [&'static str; 8]

Full category names for CBOM quality scoring, in the same slot order as Self::cbom_category_labels (the short chart labels) and as the scorer’s CBOM slot substitution (scorer.rs). These are the names serialized into diff QualityDelta categories for CBOM pairs and the names the TUI’s CBOM category rows display — one category, one name.

Trait Implementations

impl Clone for CryptographyMetrics

fn clone(&self) -> CryptographyMetrics

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CryptographyMetrics

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CryptographyMetrics

fn default() -> CryptographyMetrics

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CryptographyMetrics

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CryptographyMetrics

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.