Appendices

Appendix D: Source Notes

This book is a synthesis of repository sources. The principal sources for each part are listed here so a reader can move from explanation to authority.

External standards, programs, and tools named in the book, such as FIPS publications, ACVP, FIPS 140-3, Wycheproof, SLSA, SPDX, and CycloneDX, are referenced for orientation only. The book imports none of them as normative input, and any future use would carry the exact provenance described in Chapter 11.