The assessment and certification of encryption devices is one of the functions assigned to the National Cryptologic Center by Royal Decree 421/2004, of March 12. The Secretary of State, Director of the National Intelligence Center, as Director of the National Cryptologic Center, is the cryptologic certification authority (Article 1 of Royal Decree 421/2004).

The CCN's policy is to promote the development and use of national encryption equipment to improve the security of the Information and Communication Systems of Government Agencies.

The cryptologic certification regulations are based on the following CCN-STIC guidelines.

Series 100 Procedures:

• CCN-STIC-102 Procedimiento para la aprobación de productos de seguridad TIC
• CCN-STIC-105 Catálogo de Productos de Seguridad de las Tecnologías de la Información y la Comunicación (section: approved products)
• CCN-STIC-130 Guía Requisitos Evaluación Criptológica (DL)
• CCN-STIC-140 Taxonomía de referencia para productos de Seguridad TIC

Series 200 Standards:

• CCN-STIC-221 Guía de Mecanismos Criptográficos autorizados por el CCN

Series 2000 Certification Body:

• CCN-STIC-2100 Cryptographic Mechanisms Evaluation Methodology

Annexes:

• • CCN-STIC-2100 Anexo A - Cryptographic Mechanisms Evaluation Vendor Questionnaire
  • CCN-STIC-2100 Anexo B - Cryptographic Mechanisms Evaluation Vendor Questionnaire - Lite
  • CCN-STIC-2100 Anexo C - Random Number Generation Vendor Questionnaire

• CCN-STIC-2101 Procedimiento de autorización de laboratorios para evaluaciones CCN-STIC 2100 (MEMeC)

Annexes:

• • FOR-CRIPTO-01: Solicitud de autorización de laboratorio para evaluaciones CCN-STIC 2100 (MEMeC)