diff --git a/schema/bom-1.7.schema.json b/schema/bom-1.7.schema.json
index e1dd5b1d..3ab604b5 100644
--- a/schema/bom-1.7.schema.json
+++ b/schema/bom-1.7.schema.json
@@ -5091,6 +5091,7 @@
                 "kem",
                 "ae",
                 "combiner",
+                "key-wrap",
                 "other",
                 "unknown"
               ],
@@ -5108,6 +5109,7 @@
                 "kem": "A Key Encapsulation Mechanism (KEM) algorithm is a mechanism for transporting random keying material to a recipient using the recipient's public key.",
                 "ae": "Authenticated Encryption (AE) is a cryptographic process that provides both confidentiality and data integrity. It ensures that the encrypted data has not been tampered with and comes from a legitimate source. AE is commonly used in secure communication protocols.",
                 "combiner": "A combiner aggregates many candidates for a cryptographic primitive and generates a new candidate for the same primitive.",
+                "key-wrap": "Key-wrap is a cryptographic technique used to securely encrypt and protect cryptographic keys using algorithms like AES.",
                 "other": "Another primitive type.",
                 "unknown": "The primitive is not known."
               }
diff --git a/schema/cryptography-defs.json b/schema/cryptography-defs.json
index 7d0640f8..c2e6cd4a 100644
--- a/schema/cryptography-defs.json
+++ b/schema/cryptography-defs.json
@@ -8,8 +8,12 @@
         {"name": "RFC8017", "url": "https://doi.org/10.17487/RFC8017"},
         {"name": "IEEE1363", "url": "https://doi.org/10.1109/IEEESTD.2000.92290"}
       ],
-      "variant": "RSA-PKCS1-1.5-{digestAlgorithm}-{keyLength}",
-      "primitive": "signature"
+      "variant": [
+        {
+          "pattern": "RSA-PKCS1-1.5-{digestAlgorithm}-{keyLength}",
+          "primitive": "signature"
+        }
+      ]
     },
     {
       "family": "RSASSA-PSS",
@@ -17,32 +21,48 @@
         {"name": "RFC8017", "url": "https://doi.org/10.17487/RFC8017"},
         {"name": "IEEE1363A", "url": "https://doi.org/10.1109/IEEESTD.2004.94612"}
       ],
-      "variant": "RSA-PSS-{digestAlgorithm}-{saltLength}-{keyLength}",
-      "primitive": "signature"
+      "variant": [
+        {
+          "pattern": "RSA-PSS-{digestAlgorithm}-{saltLength}-{keyLength}",
+          "primitive": "signature"
+        }
+      ]
     },
     {
       "family": "RSAES-PKCS1",
       "standard": [
         {"name": "RFC8017", "url": "https://doi.org/10.17487/RFC8017"}
       ],
-      "variant": "RSA-PKCS1-1.5-{keyLength}",
-      "primitive": "pke"
+      "variant": [
+        {
+          "pattern": "RSA-PKCS1-1.5-{keyLength}",
+          "primitive": "pke"
+        }
+      ]
     },
     {
       "family": "RSAES-OAEP",
       "standard": [
         {"name": "RFC8017", "url": "https://doi.org/10.17487/RFC8017"}
       ],
-      "variant": "RSA-OAEP-{hashAlgorithm}-{maskGenAlgorithm}-{keyLength}",
-      "primitive": "pke"
+      "variant": [
+        {
+          "pattern": "RSA-OAEP-{hashAlgorithm}-{maskGenAlgorithm}-{keyLength}",
+          "primitive": "pke"
+        }
+      ]
     },
     {
       "family": "EdDSA",
       "standard": [
         {"name": "RFC8032", "url": "https://doi.org/10.17487/RFC8032"}
       ],
-      "variant": "Ed{25519|448}{|ph|ctx}",
-      "primitive": "signature"
+      "variant": [
+        {
+          "pattern": "Ed{25519|448}{|ph|ctx}",
+          "primitive": "signature"
+        }
+      ]
     },
     {
       "family": "ECDSA",
@@ -50,8 +70,24 @@
         {"name": "FIPS186-4", "url": "https://doi.org/10.6028/NIST.FIPS.186-4"},
         {"name": "X9.62", "url": "https://standards.globalspec.com/std/1955141/ansi-x9-62"}
       ],
-      "variant": "ECDSA-{curve}-{hash}",
-      "primitive": "signature"
+      "variant": [
+        {
+          "pattern": "ECDSA-{curve}-{hash}",
+          "primitive": "signature"
+        }
+      ]
+    },
+    {
+      "family": "DSA",
+      "standard": [
+        {"name": "FIPS186-4", "url": "https://doi.org/10.6028/NIST.FIPS.186-4"}
+      ],
+      "variant": [
+        {
+          "pattern": "DSA-{length}-{hash}",
+          "primitive": "signature"
+        }
+      ]
     },
     {
       "family": "ECDH",
@@ -60,8 +96,12 @@
         {"name": "IEEE1363", "url": "https://doi.org/10.1109/IEEESTD.2000.92290"},
         {"name": "X9.63", "url": "https://webstore.ansi.org/standards/ASCX9/ansix9632011r2017"}
       ],
-      "variant": "ECDH{E}-{curve}",
-      "primitive": "key-agree"
+      "variant": [
+        {
+          "pattern": "ECDH{E}-{curve}",
+          "primitive": "key-agree"
+        }
+      ]
     },
     {
       "family": "FFDH",
@@ -69,24 +109,81 @@
         {"name": "RFC7919", "url": "https://doi.org/10.17487/RFC7919"},
         {"name": "SP800-56A", "url": "https://doi.org/10.6028/NIST.SP.800-56Ar3"}
       ],
-      "variant": "FFDH{E}-{named_group}",
-      "primitive": "key-agree"
+      "variant": [
+        {
+          "pattern": "FFDH{E}-{named_group}",
+          "primitive": "key-agree"
+        }
+      ]
     },
     {
       "family": "SHA-1",
       "standard": [
         {"name": "FIPS180-4", "url": "https://doi.org/10.6028/NIST.FIPS.180-4"}
       ],
-      "variant": "SHA-1",
-      "primitive": "hash"
+      "variant": [
+        {
+          "pattern": "SHA-1",
+          "primitive": "hash"
+        }
+      ]
     },
     {
       "family": "SHA-2",
       "standard": [
         {"name": "FIPS180-4", "url": "https://doi.org/10.6028/NIST.FIPS.180-4"}
       ],
-      "variant": "SHA-{224|256|384|512|512/224|512/256}",
-      "primitive": "hash"
+      "variant": [
+        {
+          "pattern": "SHA-{224|256|384|512|512/224|512/256}",
+          "primitive": "hash"
+        }
+      ]
+    },
+    {
+      "family": "SHA-3",
+      "standard": [
+        {"name": "FIPS202", "url": "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf"}
+        {"name": "SP800-185", "url": "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf"}
+      ],
+      "variant": [
+        {
+          "pattern": "SHA-3-(224|256|384|512)",
+          "primitive": "hash"
+        },
+        {
+          "pattern": "SHAKE(128|256)",
+          "primitive": "xof"
+        },
+        {
+          "pattern": "cSHAKE(128|256)",
+          "primitive": "xof"
+        },
+        {
+          "pattern": "KMAC(128|256)",
+          "primitive": "mac"
+        },
+        {
+          "pattern": "HMACXOF(128|256)",
+          "primitive": "mac"
+        },
+        {
+          "pattern": "TupleHash(128|256)",
+          "primitive": "hash"
+        },
+        {
+          "pattern": "TupleHashXOF(128|256)",
+          "primitive": "xof"
+        },
+        {
+          "pattern": "ParallelHash(128|256)",
+          "primitive": "hash"
+        },
+        {
+          "pattern": "ParallelHashXOF(128|256)",
+          "primitive": "xof"
+        }
+      ]
     },
     {
       "family": "AES",
@@ -95,16 +192,47 @@
         {"name": "SP800-38{A-G}", "url": "https://doi.org/10.6028/NIST.SP.800-38A"},
         {"name": "RFC 5116", "url": "https://doi.org/10.17487/RFC5116"}
       ],
-      "variant": "AES-{128|192|256}-(ECB|CBC|CFB(1|8|128)|OFB|CTR|)",
-      "primitive": "block-cipher"
+      "variant": [
+        {
+          "pattern": "AES-{128|192|256}-(ECB|CBC|CFB(1|8|64|128)|OFB|CTR|XTS|CTS)-(padding)-(ivlen)",
+          "primitive": "block-cipher"
+        },
+        {
+          "standard": [
+            {"name": "SP800-38D", "url": "https://doi.org/10.6028/NIST.SP.800-38D"},
+            {"name": "RFC 3610", "url": "https://doi.org/10.17487/RFC5116"}
+          ],
+          "pattern": "AES-{128|192|256}-(GCM|CCM)-(taglen)-(ivlen)",
+          "primitive": "ae"
+        },
+        {
+          "standard": [
+            {"name": "RFC5649", "url": "https://doi.org/10.17487/RFC5649"}
+          ],
+          "pattern": "AES-{128|192|256}-Wrap-(PAD|KWP|PKCS7)",
+          "primitive": "key-wrap"
+        },
+        {
+          "pattern": "AES-{128|192|256}-(GMAC|CMAC)",
+          "primitive": "mac"
+        },
+        {
+          "pattern": "AES-{128|192|256}-(XCBC_MAC(_96))",
+          "primitive": "mac"
+        }
+      ]
     },
     {
       "family": "HKDF",
       "standard": [
         {"name": "RFC5869", "url": "https://doi.org/10.17487/RFC5869"}
       ],
-      "variant": "HKDF-{hash}",
-      "primitive": "kdf"
+      "variant": [
+        {
+          "pattern": "HKDF-{hash}",
+          "primitive": "kdf"
+        }
+      ]
     },
     {
       "family": "HMAC",
@@ -112,47 +240,111 @@
         {"name": "SP800-224", "url": "https://doi.org/10.6028/NIST.SP.800-224.ipd"},
         {"name": "RFC2104", "url": "https://doi.org/10.17487/RFC2104"}
       ],
-      "variant": "HMAC-{hash}-{length}",
-      "primitive": "mac"
+      "variant": [
+        {
+          "pattern": "HMAC-{hash}-{length}",
+          "primitive": "mac"
+        }
+      ]
+    },
+    {
+      "family": "CMAC",
+      "standard": [
+        {"name": "SP800-38B", "url": "https://doi.org/10.6028/NIST.SP.800-38B"}
+      ],
+      "variant": [
+        {
+          "pattern": "CMAC-{cipher_algorithm}-{length}",
+          "primitive": "mac"
+        }
+      ]
+    },
+    {
+      "family": "KMAC",
+      "standard": [
+        {"name": "SP800-108r1", "url": "https://doi.org/10.6028/NIST.SP.800-108r1-upd1"}
+      ],
+      "variant": [
+        {
+          "pattern": "KMAC-(128|256)",
+          "primitive": "mac"
+        }
+      ]
     },
     {
       "family": "ChaCha",
       "standard": [
         {"name": "RFC8439", "url": "https://doi.org/10.17487/RFC8439"}
       ],
-      "variant": "ChaCha20-{AES|other}",
-      "primitive": "stream-cipher"
+      "variant": [
+        {
+          "pattern": "ChaCha20-{AES|other}",
+          "primitive": "stream-cipher"
+        }
+      ]
     },
     {
       "family": "Poly1305",
       "standard": [
         {"name": "RFC8439", "url": "https://doi.org/10.17487/RFC8439"}
       ],
-      "variant": "Poly1305",
-      "primitive": "mac"
+      "variant": [
+        {
+          "pattern": "Poly1305",
+          "primitive": "mac"
+        }
+      ]
     },
     {
-      "family": "ChaCha20-Poly1305",
+      "family": "ChaCha20",
       "standard": [
         {"name": "RFC8439", "url": "https://doi.org/10.17487/RFC8439"}
       ],
-      "variant": "ChaCha20-Poly1305",
-      "primitive": "ae"
+      "variant": [
+        {
+          "pattern": "ChaCha20",
+          "primitive": "stream-cipher"
+        },
+        {
+          "pattern": "ChaCha20-Poly1305",
+          "primitive": "ae"
+        }
+      ]
+    },
+    {
+      "family": "Salsa20",
+      "standard": [
+        {"name": "The Salsa20 Family of Stream Ciphers", "url": "https://doi.org/10.1007/978-3-540-68351-3_8"}
+      ],
+      "variant": [
+        {
+          "pattern": "Salsa20",
+          "primitive": "stream-cipher"
+        },
+        {
+          "pattern": "Salsa20-Poly1305",
+          "primitive": "ae"
+        }
+      ]
     },
     {
       "family": "MD5",
       "standard": [
         {"name": "RFC1321", "url": "https://doi.org/10.17487/RFC1321"}
       ],
-      "variant": "MD5",
-      "primitive": "hash"
+      "variant": [
+        {
+          "pattern": "MD5",
+          "primitive": "hash"
+        }
+      ]
     },
     {
       "family": "MD4",
       "standard": [
         {"name": "RFC1320", "url": "https://doi.org/10.17487/RFC1320"}
       ],
-      "variant": "MD4",
+      "pattern": "MD4",
       "primitive": "hash"
     },
     {
@@ -160,8 +352,12 @@
       "standard": [
         {"name": "Applied Cryptography: Protocols, Algorithms, and Source Code in C", "url": "https://dl.acm.org/doi/book/10.5555/572932"}
       ],
-      "variant": "RC4-{length}",
-      "primitive": "stream-cipher"
+      "variant": [
+        {
+          "pattern": "RC4-{length}",
+          "primitive": "stream-cipher"
+        }
+      ]
     },
     {
       "family": "3DES",
@@ -169,8 +365,12 @@
         {"name": "RFC1851", "url": "https://doi.org/10.17487/RFC1851"},
         {"name": "FIPS PUB 46-3", "url": "https://csrc.nist.gov/pubs/fips/46-3/final"}
       ],
-      "variant": "3DES-{length}-{mode}",
-      "primitive": "block-cipher"
+      "variant": [
+        {
+          "pattern": "3DES-{length}-{mode}",
+          "primitive": "block-cipher"
+        }
+      ]
     },
     {
       "family": "DES",
@@ -178,24 +378,334 @@
         {"name": "FIPS PUB 46-3", "url": "https://csrc.nist.gov/pubs/fips/46-3/final"},
         {"name": "ANSI INCITS 92-1981", "url": "https://csrc.nist.gov/pubs/fips/46-3/final"}
       ],
-      "variant": "DES-{length}-{mode}",
-      "primitive": "block-cipher"
+      "variant": [
+        {
+          "pattern": "DES-{length}-{mode}",
+          "primitive": "block-cipher"
+        }
+      ]
     },
     {
       "family": "IDEA",
       "standard": [
         {"name": "A Proposal for a New Block Encryption Standard", "url": "https://doi.org/10.1007%2F3-540-46877-3_35"}
       ],
-      "variant": "IDEA-{mode}",
-      "primitive": "block-cipher"
+      "variant": [
+        {
+          "pattern": "IDEA-{mode}",
+          "primitive": "block-cipher"
+        }
+      ]
     },
     {
       "family": "RC2",
       "standard": [
         {"name": "RFC2268", "url": "https://doi.org/10.17487/RFC2268"}
       ],
-      "variant": "RC2-{length}-{mode}",
-      "primitive": "block-cipher"
+      "variant": [
+        {
+          "pattern": "RC2-{length}-{mode}",
+          "primitive": "block-cipher"
+        }
+      ]
+    },
+    {
+      "family": "ML-DSA",
+      "standard": [
+        {"name": "FIPS 204", "url": "https://doi.org/10.6028/NIST.FIPS.204"}
+      ],
+      "variant": [
+        {
+          "pattern": "ML-DSA-(44|65|87)",
+          "primitive": "signature"
+        }
+      ]
+    },
+    {
+      "family": "HashML-DSA",
+      "standard": [
+        {"name": "FIPS 204", "url": "https://doi.org/10.6028/NIST.FIPS.204"}
+      ],
+      "variant": [
+        {
+          "pattern": "HashML-DSA-(44|65|87)-(hash)",
+          "primitive": "signature"
+        }
+      ]
+    },
+    {
+      "family": "HashSLH-DSA",
+      "standard": [
+        {"name": "FIPS 205", "url": "https://doi.org/10.6028/NIST.FIPS.205"}
+      ],
+      "variant": [
+        {
+          "pattern": "HashSLH-DSA-(SHA2|SHAKE)-(128s|128f|192s|192f|256s|256f)-",
+          "primitive": "signature"
+        }
+      ]
+    },
+    {
+      "family": "XMSS",
+      "standard": [
+        {"name": "SP800-208", "url": "https://doi.org/10.6028/NIST.SP.800-208"},
+        {"name": "RFC8391", "url": "https://doi.org/10.17487/RFC8391"}
+      ],
+      "variant": [
+        {
+          "pattern": "XMSS-(SHA2|SHAKE)_(h)_(nbits)",
+          "primitive": "signature"
+        },
+        {
+          "pattern": "XMSSMT-(SHA2|SHAKE)_(h)/(d)_(nbits)",
+          "primitive": "signature"
+        },
+        {
+          "pattern": "WOTSP-(SHA2|SHAKE)_(nbits)",
+          "primitive": "signature"
+        }
+      ]
+    },
+    {
+      "family": "LMS",
+      "standard": [
+        {"name": "SP800-208", "url": "https://doi.org/10.6028/NIST.SP.800-208"},
+        {"name": "RFC8554", "url": "https://doi.org/10.17487/RFC8554"}
+      ],
+      "variant": [
+        {
+          "pattern": "LMS_(hashfun)_M(bytespernode)_H(treeheight)",
+          "primitive": "signature"
+        },
+        {
+          "pattern": "LMOTS_(hashfun)_N(bytespernode)_H(treeheight)",
+          "primitive": "signature"
+        }
+      ]
+    },
+    {
+      "family": "ML-KEM",
+      "standard": [
+        {"name": "FIPS 203", "url": "https://doi.org/10.6028/NIST.FIPS.203"}
+      ],
+      "variant": [
+        {
+          "pattern": "ML-KEM-(512|768|1024)",
+          "primitive": "kem"
+        }
+      ]
+    },
+    {
+      "family": "IKE-PRF",
+      "standard": [
+        {"name": "RFC2409", "url": "https://doi.org/10.17487/RFC2409"},
+        {"name": "RFC5996", "url": "https://doi.org/10.17487/RFC5996"}
+      ],
+      "variant": [
+        {
+          "pattern": "IKE_PRF_DERIVE",
+          "primitive": "key-agree"
+        },
+        {
+          "pattern": "IKE1_(PRF|Extended)_DERIVE",
+          "primitive": "key-agree"
+        },
+        {
+          "pattern": "IKE2_PRF_PLUS_DERIVE",
+          "primitive": "key-agree"
+        }
+      ]
+    },
+    {
+      "family": "GOST",
+      "variant": [
+        {
+          "standard": [
+            {"name": "RFC4357", "url": "https://doi.org/10.17487/RFC4357"}
+          ],
+          "pattern": "GOSTR3410",
+          "primitive": "signature"
+        },
+        {
+          "standard": [
+            {"name": "RFC4357", "url": "https://doi.org/10.17487/RFC4357"}
+          ],
+          "pattern": "GOSTR3411",
+          "primitive": "hash"
+        },
+        {
+          "standard": [
+            {"name": "RFC4357", "url": "https://doi.org/10.17487/RFC4357"}
+          ],
+          "pattern": "GOSTR3411_HMAC",
+          "primitive": "mac"
+        },
+        {
+          "standard": [
+            {"name": "RFC4357", "url": "https://doi.org/10.17487/RFC4357"}
+          ],
+          "pattern": "GOST38147-(mode)-(padding)",
+          "primitive": "block-cipher"
+        },
+        {
+          "standard": [
+            {"name": "RFC4357", "url": "https://doi.org/10.17487/RFC4357"}
+          ],
+          "pattern": "GOST38147_MAC",
+          "primitive": "mac"
+        }
+      ]
+    },
+    {
+      "family": "SEED",
+      "standard": [
+        {"name": "RFC4269", "url": "https://doi.org/10.17487/RFC4269"},
+        {"name": "RFC5669", "url": "https://doi.org/10.17487/RFC5669"}
+      ],
+      "variant": [
+        {
+          "pattern": "SEED-128-(mode)-(padding)",
+          "primitive": "block-cipher"
+        },
+        {
+          "pattern": "SEED-128-(mode)-(padding)-HMAC-(hash)-length",
+          "primitive": "ae"
+        },
+        {
+          "pattern": "SEED-128-(CCM|GCM)",
+          "primitive": "ae"
+        }
+      ]
+    },
+    {
+      "family": "ARIA",
+      "standard": [
+        {"name": "RFC5794", "url": "https://doi.org/10.17487/RFC5794"}
+      ],
+      "variant": [
+        {
+          "pattern": "ARIA-(128|192|256)-(mode)-(padding)",
+          "primitive": "block-cipher"
+        },
+        {
+          "pattern": "ARIA-(128|192|256)-(authmode)-(padding)",
+          "primitive": "ae"
+        }
+      ]
+    },
+    {
+      "family": "CAMELLIA",
+      "standard": [
+        {"name": "RFC3713", "url": "https://doi.org/10.17487/RFC3713"}
+      ],
+      "variant": [
+        {
+          "pattern": "CAMELLIA-(128|192|256)-(mode)-(padding)",
+          "primitive": "block-cipher"
+        },
+        {
+          "pattern": "CAMELLIA-(128|192|256)-(authmode)-(padding)",
+          "primitive": "ae"
+        }
+      ]
+    },
+    {
+      "family": "Twofish",
+      "standard": [
+        {"name": "Twofish: A 128-Bit Block Cipher", "url": "https://www.schneier.com/academic/twofish/"}
+      ],
+      "variant": [
+        {
+          "pattern": "Twofish-(128|192|256)-(mode)-(padding)",
+          "primitive": "block-cipher"
+        }
+      ]
+    },
+    {
+      "family": "Blowfish",
+      "standard": [
+        {"name": "Description of a new variable-length key, 64-bit block cipher (Blowfish)", "url": "https://doi.org/10.1007/3-540-58108-1_24"}
+      ],
+      "variant": [
+        {
+          "pattern": "Blowfish-(keylength)-(mode)-(padding)",
+          "primitive": "block-cipher"
+        }
+      ]
+    },
+    {
+      "family": "SP800-108",
+      "standard": [
+        {"name": "SP800-108", "url": "https://doi.org/10.6028/NIST.SP.800-108r1-upd1"}
+      ],
+      "variant": [
+        {
+          "pattern": "SP800_108_(CounterKDF|FeedbackKDF|DoublePipelineKDF)-(prf-function)-(dkmlength)",
+          "primitive": "key-derive"
+        }
+      ]
+    },
+    {
+      "family": "PKCS12-PBEA",
+      "variant": [
+        {
+          "pattern": "SHA1-PBE-(2|3)K-3DES-CBC",
+          "primitive": "block-cipher"
+        },
+        {
+          "pattern": "SHA1-PBA-SHA1-HMAC",
+          "primitive": "mac"
+        }
+      ]
+    },
+    {
+      "family": "PKCS5-PBE",
+      "variant": [
+        {
+          "pattern": "SHA1-PBE-DES(2|3)-EDE-CBC",
+          "primitive": "block-cipher"
+        },
+        {
+          "pattern": "SHA1-PBA-SHA1-HMAC",
+          "primitive": "mac"
+        },
+        {
+          "pattern": "(hash)-PBE-(block_cipher)",
+          "primitive": "block-cipher"
+        },
+        {
+          "pattern": "PBKDF2",
+          "primitive": "key-derive"
+        }
+      ]
+    },
+    {
+      "family": "BLAKE2b",
+      "standard": [
+        {"name": "RFC7693", "url": "https://doi.org/10.17487/RFC7693"}
+      ],
+      "variant": [
+        {
+          "pattern": "BLAKE2b-(160|256|384|512)",
+          "primitive": "hash"
+        },
+        {
+          "pattern": "BLAKE2b-(160|256|384|512)-HMAC",
+          "primitive": "mac"
+        }
+      ]
+    },
+    {
+      "family": "X3DH",
+      "standard": [
+        {"name": "The X3DH Key Agreement Protocol", "url": "https://signal.org/docs/specifications/x3dh/"}
+      ],
+      "variant": [
+        {
+          "pattern": "X3DH-(hash)",
+          "primitive": "key-agree"
+        }
+      ]
     }
   ]
 }
diff --git a/schema/cryptography-defs.schema.json b/schema/cryptography-defs.schema.json
index 7c6aeedb..d6f7b623 100644
--- a/schema/cryptography-defs.schema.json
+++ b/schema/cryptography-defs.schema.json
@@ -58,17 +58,58 @@
             }
           },
           "variant": {
-            "type": "string",
-            "title": "Variant",
-            "description": "Defines the pattern used to construct the complete algorithm name. Placeholders are defined by {} for algorithm-specific properties."
-          },
-          "primitive": {
-            "type": "string",
-            "title": "Primitive",
-            "description": "Type of cryptographic primitive (e.g., signature, encryption, hash)."
+            "type": "array",
+            "title": "Variants",
+            "description": "Defines algorithm variants by a naming pattern and the corrsponding cryptographic primitive.",
+            "additionalItems": false,
+            "items": {
+              "type": "object",
+              "title": "Standard Reference",
+              "description": "Reference to a standard, including its name and URL.",
+              "additionalProperties": false,
+              "properties": {
+                "pattern": {
+                  "type": "string",
+                  "title": "Standard Name",
+                  "description": "Defines the pattern used to construct the complete algorithm name. Placeholders are defined by {} for algorithm-specific properties."
+                },
+                "primitive": {
+                  "type": "string",
+                  "title": "Primitive",
+                  "description": "Type of cryptographic primitive (e.g., signature, encryption, hash)."
+                },
+                "standard": {
+                  "type": "array",
+                  "title": "Standards",
+                  "description": "List of standards defining or relating to the algorithm variant.",
+                  "additionalItems": false,
+                  "items": {
+                    "type": "object",
+                    "title": "Standard Reference",
+                    "description": "Reference to a standard, including its name and URL.",
+                    "additionalProperties": false,
+                    "properties": {
+                      "name": {
+                        "type": "string",
+                        "title": "Standard Name",
+                        "description": "The name or identifier of the standard."
+                      },
+                      "url": {
+                        "type": "string",
+                        "format": "iri",
+                        "title": "Standard URL",
+                        "description": "A URL pointing to the standard's official documentation."
+                      }
+                    },
+                    "required": ["name", "url"]
+                  }
+                }
+              },
+              "required": ["pattern", "primitive"]
+            }
           }
         },
-        "required": ["family", "variant", "primitive"]
+        "required": ["family", "variant"]
       }
     }
   },