EUCC Guidelines on Cryptography

These guidelines supporting the EUCC scheme (the European Cybersecurity Certification Scheme on Common Criteria) provides recommendations regarding the cryptographic mechanisms that should preferably be used in ICT products submitted to certification.

This document is primarily addressed to developers and evaluators.

The ECCG subgroup on cryptography, that is responsible for the maintenance of ACM, has developed a new version 3 submitted to public review until the end of July 2026. The changelog is provided together with the updated version and all modifications are highlighted in red in the document.

Access the Survey

Under the section "ENISA Additional report", the EU Agency for cybersecurity also publishes a report providing an analysis of standardisation efforts related to hybridization of traditional cryptographic mechanisms with PQC.