Plain English — promise
What counts as ASD-approved cryptography?
The Australian Signals Directorate's Information Security Manual (ISM) names the algorithms Australian government systems are allowed to trust. If your documents may ever face a government agency, an insurer or a court, that list matters to you too.
The approved list, at a glance
Signatures
ECDSA P-384, and ML-DSA-87 — the post-quantum algorithm the ISM names as its preference for the transition to 2030.
Hashing
SHA-384 and SHA-512. Older digests are being phased out of approved use.
Encryption
AES-256 — symmetric encryption that already stands up to quantum attack.
Popular — but not on the list
Ed25519 is excellent, widely-trusted cryptography — it secures SSH, the tool engineers use to log in to servers. It's also what signs every Omitly document seal today. But Ed25519 is not an ASD-approved algorithm, and we say so plainly rather than leave it implied: if your documents may face an ISM-governed reader, that's a real gap, not a footnote. A move to ASD-approved hybrid signing (ML-DSA-87 + ECDSA P-384) is on our roadmap — until it ships, Ed25519 is the honest, documented answer to "what algorithm signs my seal", not a documented exception buried alongside licence files.
What Omitly ships by default, today
Ed25519 seals over a SHA-256 digest of the whole PDF, and AES-256 output protection when you choose to encrypt. Strong settings aren't an option you enable — they're the only mode. What's roadmap, not shipped: hybrid seals signed with ML-DSA-87 and ECDSA P-384 on the ISM's approved list, SHA-384/512 digests, and a published transition plan mapped to the ISM's control numbers.
Redact and seal, entirely on your computer
Omitly redacts and Ed25519-seals PDFs on your computer, with nothing uploaded — and is moving its defaults onto the ISM's approved algorithm list.