Saudi NCA National Cryptographic Standards (NCS-1:2020)
Section 3: accepted cryptographic schemes – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Saudi NCA National Cryptographic Standards (NCS-1:2020) 3.6: Key agreement and transport: shared long-term secrets for symmetric schemes; DH, ECDH and RSA key establishment by level with forward secrecy

What does 3.6 require?

Symmetric key agreement must rely only on shared long-term secrets, and symmetric key transport uses the accepted encryption schemes or an encrypt-then-MAC combination. For asymmetric key exchange, Diffie-Hellman (RFC 3526 groups) and RSA key establishment (NIST SP 800-56B) are accepted for MODERATE only at 3072 bits or more, and Elliptic Curve Diffie-Hellman (NIST SP 800-56A) is accepted with 256-bit to 384-bit keys for MODERATE and 512-bit keys or Curve448 for ADVANCED, implemented so that key establishment is authenticated and forward secret.

Maintained by Gerard Blokdyk

Other controls in Section 3: accepted cryptographic schemes – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Saudi NCA National Cryptographic Standards (NCS-1:2020) controls