Saudi NCA National Cryptographic Standards (NCS-1:2020)
Section 4: commonly used cryptographic protocols – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Saudi NCA National Cryptographic Standards (NCS-1:2020) 4.1: IPsec: ESP and AH with SHA-2/SHA-3 HMACs by level, AES or Camellia in CTR, or CCM/GCM with 12 or 16-byte ICVs

What does 4.1 require?

IPsec authentication through AH or ESP must use HMAC-SHA2-384, HMAC-SHA3-256 or HMAC-SHA3-384 for MODERATE and HMAC-SHA3-512 for ADVANCED; confidentiality through ESP must combine one of those MACs with AES-CTR or Camellia-CTR; alternatively ESP may use authenticated encryption with AES-CCM, Camellia-CCM or AES-GCM with a 12-byte or 16-byte integrity check value. Protocols not listed in section 4 must follow the primitives and schemes of sections 2 and 3, and future protocol versions are accepted on the same condition.

Maintained by Gerard Blokdyk

Other controls in Section 4: commonly used cryptographic protocols – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Saudi NCA National Cryptographic Standards (NCS-1:2020) controls