Saudi NCA National Cryptographic Standards (NCS-1:2020)

Section 3: accepted cryptographic schemes – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Saudi NCA National Cryptographic Standards (NCS-1:2020) 3.7: Hybrid encryption: ECIES for both levels, DLIES and RSA-OAEP for MODERATE

What does 3.7 require?

The accepted hybrid (public-key plus symmetric) encryption schemes are the Elliptic Curve Integrated Encryption Scheme for both levels, and the Discrete Logarithm Integrated Encryption Scheme and RSA with Optimal Asymmetric Encryption Padding (PKCS #1 v2.1) for MODERATE only. RSA PKCS #1 v1.5 encryption is not accepted.

Maintained by Gerard Blokdyk

Other controls in Section 3: accepted cryptographic schemes – Saudi NCA National Cryptographic Standards (NCS-1:2020)

3.1 Block cipher modes: CTR, XTS-AES, OFB and CFB, with CBC for MODERATE only
3.2 Message authentication codes: CMAC and HMAC with tags of at least 96 bits
3.3 Authenticated encryption: GCM with 96-bit nonces and full tags, or CCM
3.4 Key wrapping: KW and KWP
3.5 Key derivation: HKDF, IKEv2, TLS 1.2 and X9.63 KDFs built on the NIST SP 800-56 or 800-108 constructions
3.6 Key agreement and transport: shared long-term secrets for symmetric schemes; DH, ECDH and RSA key establishment by level with forward secrecy
3.8 Digital signatures: DSA and RSA (PSS or DS2) at 3072 bits for MODERATE, ECDSA by level, Merkle signatures with accepted hashes

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Saudi NCA National Cryptographic Standards (NCS-1:2020) controls