add link to eccg agreed crypto mechanisms 2.0 document

[c2bo]

Closes #297 (?)

[awoie]

Suggested change

	<title>Agreed Cryptographic Mechanisms 2.0</title>
	<title>EUCC GUIDELINES ON CRYPTOGRAPHY: AGREED CRYPTOGRAPHIC MECHANISMS, Version 2</title>

[awoie]

Suggested change

	<organization>European Cybersecurity Certification Group, Sub-group on Cryptography</organization>
	<organization>EUROPEAN UNION AGENCY FOR CYBERSECURITY (ENISA)</organization>

[c2bo]

@awoie could you check your request for changes again? I think you reviewed while I had an incorrect link in the PR (it's 2 documents and I wanted to link to the one with actual content/advice) - sorry for that confusion

[Sakurann]

@c2bo, i think @awoie is right. eu-digital-identity-wallet/eudi-doc-standards-and-technical-specifications#415 this document should be referenced

[c2bo]

@c2bo, i think @awoie is right. eu-digital-identity-wallet/eudi-doc-standards-and-technical-specifications#415 this document should be referenced

There are 2 documents in https://certification.enisa.europa.eu/publications/eucc-guidelines-cryptography_en (the first link from the page you linked):

• the "EUCC Guidelines Cryptography v2" one which I would understand as a high level document that basically says you should consider ACMv2: https://certification.enisa.europa.eu/document/download/f4657490-9757-4a97-8deb-fd4d6a1358ee_en
• the "ECCG Agreed Cryptographic Mechanisms - version 2" (ACMv2) one which is basically the updated sog-is catalogue in the context of ECCG with concrete mechanisms etc: https://certification.enisa.europa.eu/document/download/a845662b-aee0-484e-9191-890c4cfa7aaa_en

I was under the impression it would make more sense to link the agreed mechanisms one since it has concrete guidance on mechanisms, key length, etc. but i can switch back to the high level one if that is what we agree on?

[Sakurann]

I was under the impression it would make more sense to link the agreed mechanisms one since it has concrete guidance on mechanisms, key length, etc. but i can switch back to the high level one if that is what we agree on?

or do we reference both documents...?