🔐NSA Suite B Cryptography

NEW

A defined set of cryptographic algorithms endorsed by NSA for protecting classified and unclassified national security systems.

DESCRIPTION

Suite B encompassed modern algorithms including AES for symmetric encryption, SHA-256/384 for hashing, and elliptic-curve techniques like ECDSA and ECDH, often used with GCM modes. It guided secure configurations in protocols such as TLS with specified profiles. Suite B emphasized efficiency and strong security at moderate key sizes via elliptic curves. The guidance influenced vendors and government systems for interoperability. Suite B has since been superseded by the Commercial National Security Algorithm (CNSA) Suite, which updates algorithm selections and key sizes.

ALTERNATIVE DEFINITIONS

NSA

Suite B Cryptography is a set of algorithms for protecting both classified and unclassified national security systems, including elliptic-curve algorithms, AES, and SHA-2.

Identifies algorithm families and national security system context.

Source

IETF

This document specifies Suite B cryptographic algorithms for use with TLS.

Defines Suite B usage profile within TLS protocol.

Source

RELATED TERMS

Rijndael SHA-256 ECDSA Elliptic-Curve Diffie–Hellman TLS FIPS 140-3 Public Key Infrastructure Elliptic Curve Cryptography AES-GCM

COMPETING TERMS

Commercial National Security Algorithm Suite

KNOWLEDGE AREAS

Data Security Mathematics

TARGET AUDIENCE

Chief Information Security Officer Security Architect Cybersecurity Engineer Cloud Architect IT Manager Chief Technology Officer

EXTERNAL SOURCES

• Wikipedia - NSA Suite B Cryptography
• IETF - Suite B TLS profile specification
• NIST - Key agreement recommendations including ECC
• NIST - CNSA Suite overview replacing Suite B

TOP QUESTIONS

Which algorithms are in NSA Suite B Cryptography?

Core algorithms include AES, SHA-256/384, ECDSA for signatures, and ECDH for key exchange, often used with GCM for authenticated encryption.

Category: Overview

Is Suite B still current?

No. Suite B has been superseded by the Commercial National Security Algorithm (CNSA) Suite, which updates recommendations and key sizes.

Category: Relevancy

Why did Suite B emphasize elliptic curves?

Elliptic-curve cryptography provides strong security with smaller key sizes, improving performance and bandwidth efficiency compared to RSA.

Category: Requirements

How does Suite B relate to TLS?

IETF RFCs define Suite B profiles for TLS, specifying algorithm selections and parameters for interoperable secure communications.

Category: Application

What are common mistakes implementing Suite B?

Using outdated curves, incorrect parameter choices, or non-compliant configurations can break interoperability and reduce security.

Category: Mistakes

What is a competing or successor standard to Suite B?

The CNSA Suite is the successor and current guidance for national security systems.

Category: Alternatives

What risks arise from ignoring Suite B guidance historically?

Implementations might have suffered interoperability issues or weaker security due to non-standard algorithm choices.

Category: Risk

How does Suite B intersect with FIPS 140-3?

Suite B algorithm choices often align with FIPS-approved primitives required for validated cryptographic modules.

Category: Compliance

Does Suite B address post-quantum cryptography?

No. Suite B was pre-PQC; modern guidance via CNSA and NIST standardization addresses post-quantum algorithms.

Category: Topic