Australian Information Security Manual

Guidelines for cryptography

Australian Information Security Manual ISM-1759: When using DH for agreeing on encryption session keys, a modulus of at least 3072 bits is

When using DH for agreeing on encryption session keys, a modulus of at least 3072 bits is used, preferably 3072 bits.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for cryptography

ISM-0142 The compromise or suspected compromise of cryptographic equipment or associated keying mat
ISM-0455 Where practical, cryptographic equipment, applications and libraries provide a means of da
ISM-0457 Cryptographic equipment, applications or libraries that have completed a Common Criteria e
ISM-0459 Full disk encryption, or partial encryption where access controls will only allow writing
ISM-0460 HACE is used when encrypting media that contains SECRET or TOP SECRET data.
ISM-0462 When a user authenticates to the encryption functionality of IT equipment or media, it is
ISM-0465 Cryptographic equipment, applications or libraries that have completed a Common Criteria e
ISM-0467 HACE is used to protect SECRET and TOP SECRET data when communicated over insufficiently s

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls