From the SHA-2 family only the 384-bit variant and the 512/256 variant are accepted, and only at MODERATE; from the SHA-3 family the 256 and 384 variants and the SHAKE128 and SHAKE256 extendable functions are accepted at MODERATE and the 512 variant at ADVANCED; SHAKE128 output must be at least 256 bits and SHAKE256 output at least 512 bits. Hash functions must resist inversion, pre-image and collision attacks, which excludes MD5, SHA-1 and SHA-256 alone.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.