Saudi NCA National Cryptographic Standards (NCS-1:2020)
Section 4: commonly used cryptographic protocols – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Saudi NCA National Cryptographic Standards (NCS-1:2020) 4.2: TLS: 1.2 with the listed suites and no downgrade, 1.3 recommended with TLS_AES_256_GCM_SHA384

What does 4.2 require?

TLS 1.2 is accepted only with cipher suites built on the strongest accepted primitives and schemes and a configuration that prevents downgrade; the listed 1.2 suites are the AES-128-CCM and AES-128-CCM-8 suites with ECDH, ECDHE, DH or DHE key agreement and ECDSA, RSA or DSS signatures, and the Camellia-256-GCM-SHA384 and AES-256-GCM-SHA384 suites with ECDH or ECDHE and ECDSA, for MODERATE, and the AES-256-CCM and AES-256-CCM-8 suites with ECDH or ECDHE and ECDSA for ADVANCED. TLS 1.3 is recommended for new applications, with TLS_AES_256_GCM_SHA384 accepted for both levels. Earlier TLS and all SSL versions are not accepted.

Maintained by Gerard Blokdyk

Other controls in Section 4: commonly used cryptographic protocols – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Saudi NCA National Cryptographic Standards (NCS-1:2020) controls