Saudi NCA National Cryptographic Standards (NCS-1:2020)

Section 3: accepted cryptographic schemes – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Saudi NCA National Cryptographic Standards (NCS-1:2020) 3.1: Block cipher modes: CTR, XTS-AES, OFB and CFB, with CBC for MODERATE only

What does 3.1 require?

The accepted modes of operation are Counter mode, Output Feedback and Cipher Feedback (NIST SP 800-38A), XTS-AES for storage (NIST SP 800-38E) and Cipher Block Chaining, which is accepted for MODERATE only. ECB is not accepted, and CBC must not be used in systems at the ADVANCED level.

Maintained by Gerard Blokdyk

Other controls in Section 3: accepted cryptographic schemes – Saudi NCA National Cryptographic Standards (NCS-1:2020)

3.2 Message authentication codes: CMAC and HMAC with tags of at least 96 bits
3.3 Authenticated encryption: GCM with 96-bit nonces and full tags, or CCM
3.4 Key wrapping: KW and KWP
3.5 Key derivation: HKDF, IKEv2, TLS 1.2 and X9.63 KDFs built on the NIST SP 800-56 or 800-108 constructions
3.6 Key agreement and transport: shared long-term secrets for symmetric schemes; DH, ECDH and RSA key establishment by level with forward secrecy
3.7 Hybrid encryption: ECIES for both levels, DLIES and RSA-OAEP for MODERATE
3.8 Digital signatures: DSA and RSA (PSS or DS2) at 3072 bits for MODERATE, ECDSA by level, Merkle signatures with accepted hashes

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Saudi NCA National Cryptographic Standards (NCS-1:2020) controls