Pakistan Security Standard Crypto Evaluations

This framework outlines the evaluation types, requirements, timelines, and costs for cryptographic algorithms, devices, and secure software applications. It ensures transparency and standardization in the accreditation and security assessment process.

Ser Evaluation Type Requirements Timeline Cost (Rs)
Cryptographic / Security Algorithm Evaluation
1 Detailed Evaluation
Proprietary Crypto/ Security Algorithm only
  • Algorithm Specifications including:
    • Name, Key size, Block size, mode(s)
    • Source code/Simulator (C/C++)
    • Mathematical model & block diagram(s)
    • Component-level details with rationale
    • Vendor Testing Report
    • Test Vectors, IVs, CSPs
    • Vendor Claims
    • Cryptanalysis Report (if any)
 1 ~ 3 Months 1.0M
Cryptographic Device Evaluation
2 Detailed Evaluation
with Proprietary crypto/ security algorithm(s)
  • All requirements at Serial 1
  • Device Specifications:
    • High-level design, Component details
    • Block diagrams, State transition & Flow diagrams
  • Vendor Claims & Testing Report (if any)
  • Device Security Policy
  • Algorithm Modes used in product
  • User/Operational, Configuration & Technical/Administration Manuals
  • Approved & Non-Approved Modes
  • Key Management System details & device (if any)
  • Supporting Systems Details
  • RNG Details
  • Implementation verification setup
  • Interactive sessions & support during evaluation
 3 ~ 6 Months 1.5M
Secure Software Application Evaluation
3 Surface Evaluation
with/ without Security Features Validation
  • Software Executables
  • Test accounts (if required)
  • Datasheet / Product Specification & User Manual
  • Software Test Reports (if any)
  • Product Certification (if any)
 15 ~ 30 Working Days 0.1M ~ 0.3M
Detailed Evaluation
with proprietary Crypto/ Security Algo
  • All requirements at Serial 1 & 3
  • Software Source Code &/or Algorithm Analysis
  • Fee structure varies if proprietary algorithm analysis required
  • Client/Server deployment requirements (if any)
  • Interactive sessions & support during evaluation
 15 ~ 30 Working Days 0.5M
4 Customized Evaluation To be decided on case-by-case basis as per complexity and type of Target of Evaluation