KeyLens
ReportKeyLens is building open source tools for cryptographic inventory and post-quantum security. Our initial project, cbom, is a Rust-based CLI that scans codebases for cryptographic usage. We believe cryptographic transparency should be accessible to every open-source project.
KeyLens CBOM
An early-stage open source CLI tool being built to generate a Cryptographic Bill of Materials (CBOM). Built in Rust with Tree-sitter, cbom aims to detect cryptographic algorithms, key sizes, and quantum-vulnerable primitives across multiple codebases. As the world moves toward post-quantum cryptography, cbom will help answer the question: 'What crypto are we using, where, and is it quantum-safe?'
FOSS United Grant — cbom v1.0 MVP Development
This grant funds a 3-month sprint to build cbom v1.0. The ₹1.5L ask provides a stipend and covers CI/CD infrastructure. Tranche 1 (M1, ₹50K): Build Rust CLI, integrate Tree-sitter, and scan Python. Tranche 2 (M2, ₹50K): Expand AST to Go and implement CycloneDX JSON output. Tranche 3 (M3, ₹50K): Write docs, build 'cbom diff' for CI/CD gating, and launch v1.0.