ISM-0475

When using ECDSA for digital signatures, a base point order and key size of at least 224 bits is used, preferably the P-384 curve.

Topic
Using the Elliptic Curve Digital Signature Algorithm
Applicable to
Official, Protected

History

Priority
must
Mar 2022
When using ECDSA for digital signatures, a base point order and key size of at least 224 bits is used, preferably the P-384 curve.
While existing recommendations for the use of ASD-Approved Cryptographic Algorithms to protect OFFICIAL through to PROTECTED data addressed minimum key lengths, they didn’t address recommended key lengths.
Dec 2020
When using ECDSA for digital signatures, a base point order and key size of at least 224 bits is used.
Security control 0475 was amended to remove references to a field/key size of 160 bits.
Nov 2020
When using ECDSA for digital signatures, a field/key size of at least 160 bits, preferably 256 bits, is used.
2015
Agencies using ECDSA for the approved use of digital signatures must use a field/key size ofat least 160 bits.
2010
Agencies using ECDSA, for the approved use of digital signatures, must use a field/key size of at least160 bits.
2008
Agencies using ECDSA, for the approved use of digital signatures, must use a field/ key size of at least 160 bits.