Australian Information Security Manual ISM-1917: The development and procurement of new cryptographic equipment, applications and libraries

The development and procurement of new cryptographic equipment, applications and libraries ensures support for the use of ML-DSA-87, ML-KEM-1024, SHA-384, SHA-512 and AES-256 by no later than 2030.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Guidelines for cryptography

ISM-0142 The compromise or suspected compromise of cryptographic equipment or associated keying mat
ISM-0455 Where practical, cryptographic equipment, applications and libraries provide a means of da
ISM-0457 Cryptographic equipment, applications or libraries that have completed a Common Criteria e
ISM-0459 Full disk encryption, or partial encryption where access controls will only allow writing
ISM-0460 HACE is used when encrypting media that contains SECRET or TOP SECRET data.
ISM-0462 When a user authenticates to the encryption functionality of IT equipment or media, it is
ISM-0465 Cryptographic equipment, applications or libraries that have completed a Common Criteria e
ISM-0467 HACE is used to protect SECRET and TOP SECRET data when communicated over insufficiently s

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls