Saudi NCA National Cryptographic Standards (NCS-1:2020)
Section 4: commonly used cryptographic protocols – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Saudi NCA National Cryptographic Standards (NCS-1:2020) 4.3: DNSSEC: ECDSA P-384 with SHA-384 for zone signing, HMAC-SHA384 or HMAC-SHA512 for transaction authentication

What does 4.3 require?

DNSSEC zone data must be signed with ECDSA on P-384 with SHA-384 for both levels, and transaction authentication (TSIG) must use HMAC-SHA384 for MODERATE and HMAC-SHA512 for ADVANCED (a stated exception because SHA3-512 is not implemented in the protocol).

Maintained by Gerard Blokdyk

Other controls in Section 4: commonly used cryptographic protocols – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Saudi NCA National Cryptographic Standards (NCS-1:2020) controls