Saudi NCA National Cryptographic Standards (NCS-1:2020)
Section 2: accepted cryptographic primitives – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Saudi NCA National Cryptographic Standards (NCS-1:2020) 2.2: Asymmetric algorithms: RSA and finite-field DH at 3072 bits for MODERATE, elliptic curves by level

What does 2.2 require?

RSA is accepted for MODERATE only, with a modulus of at least 3072 bits, a public exponent greater than 65537 and strong primes; finite-field Diffie-Hellman is accepted for MODERATE only, with at least 3072-bit keys and a 256-bit subgroup. Elliptic-curve algorithms are accepted on the P-256 and P-384 NIST curves, the brainpoolP256r1 and brainpoolP384r1 curves and Curve25519 for MODERATE, and on NIST P-521, Curve448 and brainpoolP512r1 for ADVANCED (Curve448 accepted for ADVANCED despite its 224-bit level because of its performance and side-channel resistance). ADVANCED systems therefore use elliptic-curve cryptography only.

Maintained by Gerard Blokdyk

Other controls in Section 2: accepted cryptographic primitives – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Saudi NCA National Cryptographic Standards (NCS-1:2020) controls