Commercial National Security Algorithm Suite
Appearance
The Commercial National Security Algorithm Suite is a set of cryptographic algorithms promulgated by the National Security Agency as a replacement for NSA Suite B Cryptography algorithms. It serves as the cryptographic base to protect US National Security Systems information up to the top secret level, while the NSA plans for a transition to quantum-resistant cryptography.[1][2][3][4][5][6][7]
The suite includes
- Advanced Encryption Standard with 256 bit keys
- Elliptic-curve Diffie–Hellman and Elliptic Curve Digital Signature Algorithm with curve P-384
- SHA-2 with 384 bits, Diffie–Hellman key exchange with a minimum 3072-bit modulus, and
- RSA with a minimum modulus size of 3072.[2]
References
- ^ Cook, John (2019-05-23). "NSA recommendations | algorithms to use until PQC". www.johndcook.com. Retrieved 2020-02-28.
{{cite web}}
: CS1 maint: url-status (link) - ^ a b "Commercial National Security Algorithm (CNSA) Suite Factsheet". apps.nsa.gov. 2015-12-30. Retrieved 2020-02-28.
{{cite web}}
: CS1 maint: url-status (link) - ^ "NSA's FAQs Demystify the Demise of Suite B, but Fail to Explain One Important Detail – Pomcor". Retrieved 2020-02-28.
- ^ https://cryptome.org/2016/01/CNSA-Suite-and-Quantum-Computing-FAQ.pdf
- ^ "Use of public standards for the secure sharing of information among national security systems, Advisory Memorandum 02-15 CNSS Advisory Memorandum Information Assurance 02-15" (PDF). Committee on National Security Systems. 2015-07-31. Archived from the original on 2015-08-17. Retrieved 2020-02-28.
- ^ "Commercial National Security Algorithm Suite". apps.nsa.gov. 19 August 2015. Retrieved 2020-02-28.
{{cite web}}
: CS1 maint: url-status (link) - ^ "RFC 8423 - Reclassification of Suite B Documents to Historic Status". tools.ietf.org. July 2018. Retrieved 2020-02-28.
{{cite web}}
: CS1 maint: url-status (link)