Australian Information Security Manual

Guidelines for cryptography

Australian Information Security Manual ISM-1766: When using SHA-2 for hashing, an output size of at least 224 bits is used, preferably SHA-

When using SHA-2 for hashing, an output size of at least 224 bits is used, preferably SHA-384 or SHA-512.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for cryptography

ISM-0142 The compromise or suspected compromise of cryptographic equipment or associated keying mat
ISM-0455 Where practical, cryptographic equipment, applications and libraries provide a means of da
ISM-0457 Cryptographic equipment, applications or libraries that have completed a Common Criteria e
ISM-0459 Full disk encryption, or partial encryption where access controls will only allow writing
ISM-0460 HACE is used when encrypting media that contains SECRET or TOP SECRET data.
ISM-0462 When a user authenticates to the encryption functionality of IT equipment or media, it is
ISM-0465 Cryptographic equipment, applications or libraries that have completed a Common Criteria e
ISM-0467 HACE is used to protect SECRET and TOP SECRET data when communicated over insufficiently s

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls