Cryptographic equipment or encryption software that implements an ASD Approved Cryptographic Protocol (AACP) is used to communicate sensitive data over public network infrastructure and through unsecured spaces.
Topic
Encrypting data in transit
Applicable to
Official
History
Priority
must
Dec 2021
Removed
The recommendation that cryptographic products have completed an ASD Cryptographic Evaluation before being used for the protection of data at rest or in transit has been replaced with a recommendation for the use of cryptographic products that have been evaluated and certified under the Common Criteria against a Protection Profile.
2015
Agencies must use an encryption product that implements an AACP if they wish tocommunicate sensitive information over public network infrastructure.