MyKripto Validation

MySEAL, National Trusted Cryptographic Algorithm List (Senarai Algoritma Kriptografi Terpercaya Negara) is a multi-year effort that will be used as a requirement and guideline on the usage of cryptographic algorithms in all trusted cryptography products in Malaysia. The initiative was initiated in 2016, laying the foundation for developing and validating cryptographic algorithms in Malaysia. As a result, in 2017, the MySEAL initiative successfully produced a list of trusted cryptographic algorithms under the AKSA category.

Building upon the achievements of the MySEAL Project, the MySEAL 2.0 initiatives were continued in 2023. The primary objective remains unchanged: to provide a list of cryptographic algorithms in alignment with the National Cryptography Policy (NCP). While NCP serves as a guiding document for Malaysia to achieve cryptographic sovereignty, MySEAL 2.0 will support the scientific areas of cryptography and cryptanalysis. The introduction of MySEAL 2.0 initiatives signifies a commitment to evolving technologies and addressing emerging challenges in the field of cryptography.

MySEAL 2.0 initiatives, encompass two categories of cryptographic algorithms: AKSA and AKBA. AKSA represents Existing Cryptographic Algorithms (Algoritma Kriptografi Sedia Ada) that have already been published in recognised standards or have undergone thorough evaluation in established cryptography algorithm projects. These algorithms have demonstrated their security, efficiency, and suitability for cryptographic applications. AKSA includes algorithms endorsed by reputable organisations such as FIPS (Federal Information Processing Standards), CRYPTREC (Cryptography Research and Evaluation Committees), NESSIE (New European Schemes for Signatures, Integrity, and Encryption), and The European Network of Excellence in Cryptology (ECRYPT) Stream Cipher Project (eSTREAM), among others.

AKBA refers to New Cryptographic Algorithms (Algoritma Kriptografi Baharu) that have not yet been published in recognised standards or widely adopted in the cryptographic community. The AKBA category encourages local cryptographic experts and researchers to explore and develop novel algorithms. By providing a platform for evaluating these new algorithms, MySEAL 2.0 aims to promote the growth and advancement of the Malaysian cryptographic ecosystem. AKBA offers an opportunity for researchers and industry players to contribute cutting-edge algorithms and potentially establish new standards in the field of cryptography.

This initiative outlines a set of comprehensive criteria that have been established to ensure the integrity and reliability of cryptographic algorithms listed in MySEAL 2.0. These criteria have been carefully developed in accordance with internationally accepted standards and requirements, as defined by the MySEAL Focus Group committee. This committee, spearheaded by CyberSecurity Malaysia as the MySEAL Secretariat, comprises esteemed members representing various Malaysian institutions, including academia, government agencies, and industry experts.

MySEAL initiative is by no means a small feat. Ever since the documentation of the National IT Agenda (NITA) in 1996, which listed e-Sovereignty as one of Malaysia’s objectives in entering the Information Technology era, the execution of MySEAL has been a significant milestone for Malaysia. It is through this initiative that Malaysia will enter into the realm of information security fundamentals. This challenging arena will attest to Malaysia’s perseverance and stamina in protecting its information infrastructure at the cryptographic algorithm level.

Besides providing challenges and aspirations to Malaysian cryptographers, this initiative also aims at nurturing new talent and retaining existing talent. With this note, the MySEAL 2.0 initiative has given Malaysia a golden opportunity to provide a collaborative platform between government entities, industries, and higher institutions, to promote and encourage participants in developing new cryptographic algorithms and producing new cryptographers.

Two sales professionals smile.

Focus Group Members

  1. Angkatan Tentera Malaysia (ATM)
  2. Malaysian Administrative Modernisation and Management Planning Unit (MAMPU)
  3. Malaysia Office of the Chief Government Security Officer (CGSO)
  4. MIMOS Berhad National
  5. Cyber Security Agency (NACSA)
  6. Polis Diraja Malaysia (PDRM)
  7. Universiti Malaya (UM)
  8. Universiti Multimedia (MMU)
  9. Universiti Putra Malaysia (UPM)
  10. Universiti Teknikal Malaysia Melaka (UTeM)
  11. Universiti Tenaga Nasional (UNITEN)
  12. Universiti Tunku Abdul Rahman (UTAR)
Two sales professionals smile.

MySEAL 2.0 Evaluation Committee

  1. CyberSecurity Malaysia (CSM)
  2. MIMOS Berhad
  3. Universiti Kebangsaan Malaysia (UKM)
  4. Universiti Malaya (UM)
  5. Universiti Malaysia Sabah (UMS)
  6. Universiti Multimedia (MMU)
  7. Universiti Pertahanan Nasional Malaysia (UPNM)
  8. Universiti Putra Malaysia (UPM)
  9. Universiti Sains Islam Malaysia (USIM)
  10. Universiti Sains Malaysia (USM)
  11. Universiti Teknikal Malaysia Melaka (UTeM)
  12. Universiti Teknologi MARA (UiTM)
  13. Universiti Tenaga Nasional (UNITEN)
  14. Universiti Tunku Abdul Rahman (UTAR)
  15. Universiti Tun Hussein Onn Malaysia (UTHM)
  16. Universiti Utara Malaysia (UUM)
  17. Xiamen University Malaysia (XMUM)

MySEAL Category


Existing Cryptographic Algorithm for MySEAL (AKSA MySEAL)


Cryptographic algorithms listed in the AKSA MySEAL are existing algorithms selected from various standards (i.e. FIPS and ISO/IEC) and other cryptographic algorithm listing projects (i.e. CRYPTREC, NESSIE, ECRYPT, and eSTREAM). These algorithms have been evaluated through two phases; the First Phase of AKSA MySEAL Evaluation which started in May 2023 is based on the MySEAL’s Nomination Criteria, whereas the Second Phase of AKSA MySEAL Evaluation which continued soon after and will be concluded in 2024, is based on the MySEAL’s Evaluation Criteria. Cryptographic experts from several industries and local universities took part in the evaluation with international reviewers also involved. Listed below are the recommended cryptographic algorithms in AKSA MySEAL.

AKSA MySEAL is divided into three different categories:

AKSA MySEAL 2.0 Approved

Refers to cryptographic algorithms that have undergone thorough evaluation within the MySEAL 1.0, meeting the highest standards of security and compliance. These algorithms have received official approval from the MySEAL Focus Group, signifying their adherence to established criteria and their suitability for secure digital applications.

Cryptographic Primitives Algorithms & Variants
Block Cipher

General-Purpose Block Ciphers:

Algorithm Key length
1 AES 128, 192, 256
2 Camellia 128, 192, 256
3 CLEFIA 128, 192, 256
4 SEED 128

Lightweight Block Cipher:

Algorithm Key length
1 HIGHT 128
2 PRESENT 80, 128
Stream Cipher
Algorithm Key length
1 ChaCha20 256
2 HC 128
3 KCipher-2 128
4 MUGI 128
5 Rabbit 128
Asymmetric Cryptographic

Encryption Scheme:

Algorithm
1 ACE-KEM
2 ECIES-KEM
3 FACE-KEM
4 PSEC-KEM
5 RSA-KEM
6 RSA-OAEP

Key Agreement Scheme:

Algorithm
1 DH Ephemeral-Ephemeral (C(2e,0s))
2 DH Ephemeral-Static (C(1e,1s))
3 DH Ephemeral-Static (C(1e,2s))
4 DH Ephemeral-Static (C(2e,2s))
5 ECDH Ephemeral-Ephemeral (C(2e,0s))
6 ECDH Ephemeral-Static (C(1e,2s))
7 ECDH Ephemeral-Static (C(2e,2s))
8 ECDH Ephemeral-Static(C(1e,1s))
Cryptographic Hash Function

General-Purpose Hash Function:

Algorithm Digest length
1 SHA2 384, 512, 512/224, 512/256
2 SHA3 224, 256, 384, 512
3 SM3 256

Lightweight Hash Function:

Algorithm Digest length
1 PHOTON 80/20/16 (P100),
128/16/16 (P144),
160/36/36 (P196),
224/32/32 (P256),
256/32/32 (P288)
2 SPONGENT 88, 128, 160, 224, 256
Cryptographic Prime Number Generators

Primality Testing:

Algorithm
1 Elliptic Curve Primality Test
2 Miller-Rabin Primality Test
3 Probabilistic Lucas Primality Test
4 Pocklington Primality Test
Deterministic Random Bit Generator
Algorithm Digest length
1 AES-CTR-DRBG 128, 192, 256
2 HMAC-SHA2-DRBG 224, 256, 384, 512, 512/224, 512/256
3 SHA2-DRBG 224, 256, 384, 512, 512/224, 512/256
Digital Signature Scheme

Classic Hard Problem-based Signature Schemes:

Algorithm
1 BLS Signature Scheme
2 Elliptic Curve Digital Signature Algorithm (ECDSA)
3 Elliptic Curve Schnorr DSA (ECSDSA)
4 RSA-PSS (RSA-Probabilistic Signature Scheme)
5 ShangMi2 (SM2)

Stateful Hash-based Signature Schemes:

Algorithm
1 LMS
2 XMSS
3 XMSSMT
AKSA MySEAL 2.0 Neutral

Encompasses cryptographic algorithms that, while not yet evaluated or officially approved within MySEAL, are allowed for use under specific conditions. MySEAL Neutral lists cryptographic algorithms that are in a transitional phase, allowing their usage with caution under controlled circumstances. These algorithms are listed in other approved cryptographic algorithm standardisation projects.

Cryptographic Primitives Algorithms
Message Authentication Code (MAC)
  1. Cipher-based MAC (CMAC)?
  2. Counter with Cipher Block Chaining-Message Authentication Code (CCM)?
  3. Galois/Counter Mode (GCM) and GMAC
  4. Keyed-Hash Message Authentication Code (HMAC)
  5. SHA-3 Derived Functions: cSHAKE, KECCAK Message Authentication Code (KMAC), TupleHash, and ParallelHash
Cryptographic Hash Function SHA-256 with the following conditions:
  1. SHA-256 usage is sanctioned only until the year 2030.
  2. It is intended for specific hash purposes such as password hashing, digital signatures, and data integrity verification.
  3. Not recommended for message authentication purposes.
  4. It will be acknowledged as 80-bit security in Malaysia's scheme.
AKSA MySEAL 2.0 Monitored

Specifically designated for cryptographic algorithms intended solely for ensuring interoperability with legacy systems. They are not intended for general use and should be carefully monitored to serve their purpose effectively in bridging the gap between modern cryptographic requirements and legacy system constraints. The listed cryptographic algorithms must be highly monitored for their ability to achieve the security objectives and when in use, must be with high caution.

Cryptographic Primitives Algorithms
Symmetric Algorithms
  • Two-key TDEA Decryption
  • Three-key TDEA Decryption
  • SKIPJACK Decryption
Digital Signature Verification < 112 bits of security strength:
  • DSA: ((512 ? L < 2048) or (160 ? N < 224))
  • ECDSA: 160 ? len(n) < 224
  • RSA: 1024 ? len(n) < 2048
Hash Functions
  • SHA-1
MAC Algorithms
  • HMAC Verification: Key lengths < 112 bits
  • CMAC Verification: Two-key TDEA and Three-key TDEA



New Cryptographic Algorithm for MySEAL (AKBA MySEAL)

AKBA shortlists evaluated algorithms that are not included in any existing international standards, regional or national portfolios, or other cryptographic algorithm listing projects. The development of AKBA MySEAL commenced in December 2016 with a call for the submission of algorithms for six categories of primitive. Eventually, seven submissions were received under three categories. Out of the seven submissions, six were shortlisted for Phase II evaluation. One asymmetric encryption submission was withdrawn in Phase I. Subsequently, two out of the six submissions in Phase II were shortlisted as the finalist algorithms for Phase III evaluation. The two algorithms are the Rabin-p Key Encapsulation Mechanism and the TNC Signature Scheme as listed in the table below. Upon meticulous evaluation by the Evaluation Committee and intense discussions, both the algorithms under evaluation are not recommended to be shortlisted as AKBA MySEAL. However, these two algorithms will be considered in the next AKBA MySEAL evaluation.

Cryptographic Primitives Algorithm Name Algorithm Information Authors
Asymmetric Encryption Scheme Rabin-p KEM 1. Proposol
2. Presentation slide from AKBA MySEAL Seminar
3. IP Statement

1. Muhammad Asyraf Asbullah
2. Muhammad Rezal Kamel Ariffin
3. Zahari Mahad

Digital Signature Scheme TNC 1. Proposal
2. Presentation slide from AKBA MySEAL Seminar
3. IP Statement

1. Tan Shu Yuan
2. Ng Tiong Sik
3. Chin Ji Jian



Contact

For any enquiry please contact:
info@cybersecurity.my

logo
CyberSecurity Malaysia is the national cyber security specialist agency under the purview of the Ministry of Digital (KD)
 
Contact Us

  • CyberSecurity Malaysia,
    Level 7 Tower 1, Menara Cyber Axis, Jalan Impact,
    63000 Cyberjaya, Selangor Darul Ehsan, Malaysia.

  • info@cybersecurity.my

  • +603 - 8800 7999

  • +603 - 8008 7000

TOP
ASK Byte
Chatbot Portal

Hi, I am ASK Byte. Please submit your questions about the portal and I will try to get answers from online knowledge stores.

Hi, Saya Admin Chatbot. Saya sedia chat dengan anda secara terus. Bagaimana saya boleh membantu anda?

Click the button below to interact with the CSM chatbot

Proceed