Australian Information Security Manual

Guidelines for cryptography

Australian Information Security Manual ISM-1769: When using AES for encryption, AES-128, AES-192 or AES-256 is used, preferably AES-256.

When using AES for encryption, AES-128, AES-192 or AES-256 is used, preferably AES-256.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for cryptography

ISM-0142 The compromise or suspected compromise of cryptographic equipment or associated keying mat
ISM-0455 Where practical, cryptographic equipment, applications and libraries provide a means of da
ISM-0457 Cryptographic equipment, applications or libraries that have completed a Common Criteria e
ISM-0459 Full disk encryption, or partial encryption where access controls will only allow writing
ISM-0460 HACE is used when encrypting media that contains SECRET or TOP SECRET data.
ISM-0462 When a user authenticates to the encryption functionality of IT equipment or media, it is
ISM-0465 Cryptographic equipment, applications or libraries that have completed a Common Criteria e
ISM-0467 HACE is used to protect SECRET and TOP SECRET data when communicated over insufficiently s

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls