Document ID: chunk:federal_register_of_legislation:F2024L01435:reg:1
Version: federal_register_of_legislation:F2024L01435
Segment Type: reg
Provision Reference: reg 1
Character Range: 61832–63225

1                                                   The secret cryptographic key and its algorithm:  must:
                                                                                                      1.      provide at least the minimum-security strength specified in the latest edition of the ISM;
                                                                                                      1.     be stored in suitably secure storage available to the authenticator application. Applications must utilise one of the following mechanisms to be considered as secure storage:
                                                                                                          (i) keychain storage;
                                                                                                          (ii) Trusted Platform Module;
                                                                                                          (iii) Trusted Execution Environment;
                                                                                                          (iv) secure element; and
                                                                                                      1.      only be accessible to the authenticating software on the device that is authorised. All unauthorised software must not be able to access the secret key.