Malaysian Validation Programs Overview

Hazlin Abdul Rani

CyberSecurity Malaysia Malaysia

Copyright © 2016 CyberSecurity Malaysia 3 CyberSecurity Malaysia q Company Limited-by-Guarantee under the supervision of Ministry of Science Technology and Innovaon (MOSTI) q Est. 1997 q A Naonal Body to monitor the Naonal e-Security aspect q Provides specialised cybersecurity services and connuously idenﬁes possible areas that may be detrimental to naonal security and public safety

Cyber999 Security Info Security Strategic & Management Professional Engagement Help Centre Best Pracces Development

Security Digital Assurance Research Forensics Outreach Cyber Security 5 Certification

Informaon ISCB Security Cerﬁcaon Body

Malaysian Security MySEF Evaluaon Facility

Cryptography MyCEL Evaluaon Lab

Ø Currently being developed by ISCB, CyberSecurity Malaysia Ø Complement two other existing schemes q Malaysian Common Criteria Evaluation & Certiﬁcation (MyCC) Scheme q ICT Product Security Assessment (IPSA) Certiﬁcation Scheme Ø Validate cryptographic module – cryptography algorithm conformance test

11th Malaysian Development Plan (RMK11), 2016 - 2020

Before RMK11 2016 2017 2018 2019 • Research – • Apply for • Lab • Pilot test • Finalised FIPS140, lab accredita MyCMV MyCMV Cryptrec, accredita on • 2nd phase Scheme NESSIE etc on • Connue MySEAL • Launch • Consultant • Developing developing MyCMV • Training MyCMV MyCMV Scheme Scheme Scheme • MySEAL • 1st phase iniaves MySEAL

MyCMV

SENARAI ALGORITMA KRIPTOGRAFI TERPERCAYA NEGARA / National Trusted Cryptography Algorithm List

Ø The MySEAL project is a multi-year effort, running from 2016-2020, which will be used as a requirement and guideline on the usage of cryptographic algorithms in all trusted cryptography products in Malaysia Ø speciﬁcally designed to provide a list of cryptographic algorithms suitable for implementation within Malaysian context that supports Dasar Kriptograﬁ Negara (DKN) Ø MySEAL Focus Group & MySEAL Evaluation Committee

Existing algorithm New algorithm

Published as a standard or in other naonal cryptography algorithm Has not been published as a standard project

ISO/IEC, NIST, CRYPTREC, NESSIE Local & Internaonal parcipants

Symmetric, Asymmetric, Hash Symmetric, Asymmetric, Hash funcon, Key Generaon funcon, Key Generaon

Open for submission. Due 17th Nov 2017

q Cryptography Evaluation Lab (MyCEL) q In the process of CST lab accreditation by NVLAP

CVP Certification Exam