# What should a cryptographic inventory include?

For each place where cryptography protects something, record what is protected, how, and who can change it. Practical fields: the system or service and its owner; what it protects, with the data type and how many years it must stay secret; the protocol, such as TLS, SSH, IPsec, S/MIME, code signing, or disk and database encryption; the algorithms for key exchange, signatures and encryption, with key sizes; certificates, their issuer and expiry; the library or product version and whether the vendor has a post-quantum plan; and whether the algorithm can be changed by configuration. Add a priority derived from Mosca's inequality. Sources differ by layer: network observation for what crosses the wire, certificate management and scanners for certificates, software composition analysis and supplier questionnaires for what sits inside applications. An inventory that lists only certificates misses key exchange, and one built only from the network misses data at rest. Keep it current, because each update can change the answer, and date every entry: auditors and tenders ask when it was last checked.

FAQ: [Post-quantum cryptography](https://netsenx.com/en/faq/pqc) · https://netsenx.com/en/faq/what-should-a-cryptographic-inventory-include

## Read next

- https://netsenx.com/en/encrypted-traffic-analysis
- https://netsenx.com/en/features
- https://netsenx.com/en/blog/2026-10-27_harvest-now-decrypt-later

## Related questions

- [Does NetSenX protect us against quantum computers?](https://netsenx.com/en/faq/does-netsenx-protect-us-against-quantum-computers)
- [How do we answer an RFP question about post-quantum readiness?](https://netsenx.com/en/faq/how-to-answer-an-rfp-question-on-post-quantum-readiness)
- [What should we ask vendors about post-quantum readiness?](https://netsenx.com/en/faq/what-to-ask-vendors-about-post-quantum-readiness)
- [What is a quantum computer?](https://netsenx.com/en/faq/what-is-a-quantum-computer)
- [Why are quantum computers a threat to encryption?](https://netsenx.com/en/faq/why-are-quantum-computers-a-threat-to-encryption)