Policy Tracker

Australia: ASD Updates ISM With PQC Algorithms and 2030 Cessation Deadline

9 December 2024
Countries & Organisations
Policy Domains

The Australian Signals Directorate (ASD) published a December 2024 update to the Information Security Manual (ISM) Guidelines for Cryptography, introducing new controls (ISM-1990 through ISM-1995) that adopted specific parameter sets of ML-KEM and ML-DSA as approved algorithms. The ASD guidance recommended ceasing the use of traditional asymmetric cryptography by the end of 2030, five years earlier than comparable NIST timelines.

ASD set three milestones for organizations: a refined post-quantum cryptography (PQC) transition plan by the end of 2026, commencement of transition for critical systems by the end of 2028, and full transition by the end of 2030. Algorithms to be phased out included RSA, Diffie-Hellman, ECDH, and ECDSA.

Separately, ASD published a “Planning for Post-Quantum Cryptography” guidance document outlining the LATICE transition framework covering five phases: locate, assess, triage, implement, and communicate. ASD did not recommend hybrid post-quantum/traditional schemes as a long-term solution, and it stated that quantum key distribution was not supported for secure communications due to practical limitations.

Share

Stay informed

Receive the Quantum Policy Radar Open Brief — a free selection of curated quantum policy intelligence.

We'll send you a confirmation email. No spam, unsubscribe anytime.