Document ID: chunk:federal_register_of_legislation:F2024L01435:reg:6
Version: federal_register_of_legislation:F2024L01435
Segment Type: reg
Provision Reference: reg 6
Character Range: 51305–52512

6                                a memorised secret is being stored:                                                         must be stored in a form that is resistant to offline attacks, including by ensuring:
                                                                                                                              1.      memorised secrets are salted and hashed using a suitable one-way cryptographic key derivation function;
                                                                                                                              1.     the salt value is at least 32 bits in length and be chosen arbitrarily so as to minimise salt value collisions among stored hashes; and
                                                                                                                              2.      both the salt value and the resulting hash are stored for each individual who uses memorised secrets.

3.4  Look-up secrets
  For look-up secrets, the standards in the following table apply.

Standards for look-up secrets
Item                           Requirements—If:                                                                    the standard is: