Saudi NCA National Cryptographic Standards (NCS-1:2020)
Section 5: public key infrastructure – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Saudi NCA National Cryptographic Standards (NCS-1:2020) 5.1: Certificate algorithms: 4096-bit RSA or strong curves for roots, 3072-bit RSA or accepted curves below, SHA-2/SHA-3 and X.509 compliance

What does 5.1 require?

Root CA certificates must use RSA with at least 4096-bit keys or one of the curves P-384 or P-521 (NIST), Curve448, or the Brainpool 384 r1 or 512 r1 curves; intermediate and end-entity certificates must use RSA with at least 3072-bit keys or any of the accepted curves (P-256, P-384, P-521, Curve25519, Curve448 and the Brainpool 256, 384 and 512 r1 curves). Certificates, CRLs and ARLs must comply with X.509 (RFC 5280), signatures must use SHA-2 or SHA-3 as in section 2, and the asymmetric and hash strengths must be matched.

Maintained by Gerard Blokdyk

Other controls in Section 5: public key infrastructure – Saudi NCA National Cryptographic Standards (NCS-1:2020)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Saudi NCA National Cryptographic Standards (NCS-1:2020) controls