Saudi NCA National Cryptographic Standards (NCS-1:2020)

Section 3: accepted cryptographic schemes – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Saudi NCA National Cryptographic Standards (NCS-1:2020) 3.3: Authenticated encryption: GCM with 96-bit nonces and full tags, or CCM

What does 3.3 require?

The accepted authenticated encryption modes are Galois/Counter Mode (NIST SP 800-38D), with nonces of at least 96 bits that are unique within the key's change period and with no short authentication tags, and Counter with CBC-MAC (NIST SP 800-38C).

Maintained by Gerard Blokdyk

Other controls in Section 3: accepted cryptographic schemes – Saudi NCA National Cryptographic Standards (NCS-1:2020)

3.1 Block cipher modes: CTR, XTS-AES, OFB and CFB, with CBC for MODERATE only
3.2 Message authentication codes: CMAC and HMAC with tags of at least 96 bits
3.4 Key wrapping: KW and KWP
3.5 Key derivation: HKDF, IKEv2, TLS 1.2 and X9.63 KDFs built on the NIST SP 800-56 or 800-108 constructions
3.6 Key agreement and transport: shared long-term secrets for symmetric schemes; DH, ECDH and RSA key establishment by level with forward secrecy
3.7 Hybrid encryption: ECIES for both levels, DLIES and RSA-OAEP for MODERATE
3.8 Digital signatures: DSA and RSA (PSS or DS2) at 3072 bits for MODERATE, ECDSA by level, Merkle signatures with accepted hashes

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Saudi NCA National Cryptographic Standards (NCS-1:2020) controls