National Trusted Cryptographic Algorithm List (MySEAL)

MySEAL, National Trusted Cryptographic Algorithm List (Senarai Algoritma Kriptografi Terpercaya Negara) is a multi-year effort that will be used as a requirement and guideline on the usage of cryptographic algorithms in all trusted cryptography products in Malaysia. The initiative was initiated in 2016, laying the foundation for developing and validating cryptographic algorithms in Malaysia. As a result, in 2017, the MySEAL initiative successfully produced a list of trusted cryptographic algorithms under the AKSA category.

Building upon the achievements of the MySEAL Project, the MySEAL 2.0 initiatives were continued in 2023. The primary objective remains unchanged: to provide a list of cryptographic algorithms in alignment with the National Cryptography Policy (NCP). While NCP serves as a guiding document for Malaysia to achieve cryptographic sovereignty, MySEAL 2.0 will support the scientific areas of cryptography and cryptanalysis. The introduction of MySEAL 2.0 initiatives signifies a commitment to evolving technologies and addressing emerging challenges in the field of cryptography.

MySEAL 2.0 initiatives, encompass two categories of cryptographic algorithms: AKSA and AKBA. AKSA represents Existing Cryptographic Algorithms (Algoritma Kriptografi Sedia Ada) that have already been published in recognised standards or have undergone thorough evaluation in established cryptography algorithm projects. These algorithms have demonstrated their security, efficiency, and suitability for cryptographic applications. AKSA includes algorithms endorsed by reputable organisations such as FIPS (Federal Information Processing Standards), CRYPTREC (Cryptography Research and Evaluation Committees), NESSIE (New European Schemes for Signatures, Integrity, and Encryption), and The European Network of Excellence in Cryptology (ECRYPT) Stream Cipher Project (eSTREAM), among others.

AKBA refers to New Cryptographic Algorithms (Algoritma Kriptografi Baharu) that have not yet been published in recognised standards or widely adopted in the cryptographic community. The AKBA category encourages local cryptographic experts and researchers to explore and develop novel algorithms. By providing a platform for evaluating these new algorithms, MySEAL 2.0 aims to promote the growth and advancement of the Malaysian cryptographic ecosystem. AKBA offers an opportunity for researchers and industry players to contribute cutting-edge algorithms and potentially establish new standards in the field of cryptography.

This initiative outlines a set of comprehensive criteria that have been established to ensure the integrity and reliability of cryptographic algorithms listed in MySEAL 2.0. These criteria have been carefully developed in accordance with internationally accepted standards and requirements, as defined by the MySEAL Focus Group committee. This committee, spearheaded by CyberSecurity Malaysia as the MySEAL Secretariat, comprises esteemed members representing various Malaysian institutions, including academia, government agencies, and industry experts.

MySEAL initiative is by no means a small feat. Ever since the documentation of the National IT Agenda (NITA) in 1996, which listed e-Sovereignty as one of Malaysia’s objectives in entering the Information Technology era, the execution of MySEAL has been a significant milestone for Malaysia. It is through this initiative that Malaysia will enter into the realm of information security fundamentals. This challenging arena will attest to Malaysia’s perseverance and stamina in protecting its information infrastructure at the cryptographic algorithm level.

Besides providing challenges and aspirations to Malaysian cryptographers, this initiative also aims at nurturing new talent and retaining existing talent. With this note, the MySEAL 2.0 initiative has given Malaysia a golden opportunity to provide a collaborative platform between government entities, industries, and higher institutions, to promote and encourage participants in developing new cryptographic algorithms and producing new cryptographers.

Two sales professionals smile.

Focus Group Members

  1. Angkatan Tentera Malaysia (ATM)
  2. Malaysian Administrative Modernisation and Management Planning Unit (MAMPU)
  3. Malaysia Office of the Chief Government Security Officer (CGSO)
  4. MIMOS Berhad National
  5. Cyber Security Agency (NACSA)
  6. Polis Diraja Malaysia (PDRM)
  7. Universiti Malaya (UM)
  8. Universiti Multimedia (MMU)
  9. Universiti Putra Malaysia (UPM)
  10. Universiti Teknikal Malaysia Melaka (UTeM)
  11. Universiti Tenaga Nasional (UNITEN)
  12. Universiti Tunku Abdul Rahman (UTAR)
Two sales professionals smile.

MySEAL 2.0 Evaluation Committee

  1. CyberSecurity Malaysia (CSM)
  2. MIMOS Berhad
  3. Universiti Kebangsaan Malaysia (UKM)
  4. Universiti Malaya (UM)
  5. Universiti Malaysia Sabah (UMS)
  6. Universiti Multimedia (MMU)
  7. Universiti Pertahanan Nasional Malaysia (UPNM)
  8. Universiti Putra Malaysia (UPM)
  9. Universiti Sains Islam Malaysia (USIM)
  10. Universiti Sains Malaysia (USM)
  11. Universiti Teknikal Malaysia Melaka (UTeM)
  12. Universiti Teknologi MARA (UiTM)
  13. Universiti Tenaga Nasional (UNITEN)
  14. Universiti Tunku Abdul Rahman (UTAR)
  15. Universiti Tun Hussein Onn Malaysia (UTHM)
  16. Universiti Utara Malaysia (UUM)
  17. Xiamen University Malaysia (XMUM)

MySEAL Category


Existing Cryptographic Algorithm for MySEAL (AKSA MySEAL)


Cryptographic algorithms listed in the AKSA MySEAL are existing algorithms selected from various standards (i.e. FIPS and ISO/IEC) and other cryptographic algorithm listing projects (i.e. CRYPTREC, NESSIE, ECRYPT, and eSTREAM). These algorithms have been evaluated through two phases; the First Phase of AKSA MySEAL Evaluation which started in May 2023 is based on the MySEAL’s Nomination Criteria, whereas the Second Phase of AKSA MySEAL Evaluation which continued soon after and will be concluded in 2024, is based on the MySEAL’s Evaluation Criteria. Cryptographic experts from several industries and local universities took part in the evaluation with international reviewers also involved. Listed below are the recommended cryptographic algorithms in AKSA MySEAL.

AKSA MySEAL is divided into three different categories:

AKSA MySEAL 2.0 Approved

Cryptographic algorithms that have met high standards of security and compliance. These algorithms have been approved by MySEAL Focus Group, signifying their reliability for secure digital applications in Malaysia’s government, industry, and critical infrastructures.

Cryptographic Primitives Algorithms & Variants
Block Cipher

General-Purpose Block Ciphers:

No Algorithm Key length
1 AES 128, 192, 256
2 Camellia 128, 192, 256
3 CLEFIA 128, 192, 256
4 SEED 128


Lightweight Block Cipher:

No Algorithm Key length
1 HIGHT 128
2 PRESENT 80, 128
Stream Cipher
No Algorithm Key length
1 ChaCha20 256
2 HC 128
3 KCipher-2 128
4 MUGI 128
5 Rabbit 128
Asymmetric Cryptographic

Encryption Scheme:

No Algorithm
1 ACE-KEM
2 ECIES-KEM
3 FACE-KEM
4 PSEC-KEM
5 RSA-KEM
6 RSA-OAEP


Key Agreement Scheme:

No Algorithm
1 DH Ephemeral-Ephemeral (C(2e,0s))
2 DH Ephemeral-Static (C(1e,1s))
3 DH Ephemeral-Static (C(1e,2s))
4 DH Ephemeral-Static (C(2e,2s))
5 ECDH Ephemeral-Ephemeral (C(2e,0s))
6 ECDH Ephemeral-Static (C(1e,2s))
7 ECDH Ephemeral-Static (C(2e,2s))
8 ECDH Ephemeral-Static(C(1e,1s))
Cryptographic Hash Function

General-Purpose Hash Function:

No Algorithm Digest length
1 SHA2 384, 512, 512/224, 512/256
2 SHA3 224, 256, 384, 512
3 SM3 256


Lightweight Hash Function:

No Algorithm Digest length
1 PHOTON 80/20/16 (P100),
128/16/16 (P144),
160/36/36 (P196),
224/32/32 (P256),
256/32/32 (P288)
2 SPONGENT 88, 128, 160, 224, 256
Cryptographic Prime Number Generators

Primality Testing:

No Algorithm
1 Elliptic Curve Primality Test
2 Miller-Rabin Primality Test
3 Probabilistic Lucas Primality Test
4 Pocklington Primality Test
Deterministic Random Bit Generator
No Algorithm Digest length
1 AES-CTR-DRBG 128, 192, 256
2 HMAC-SHA2-DRBG 224, 256, 384, 512, 512/224, 512/256
3 SHA2-DRBG 224, 256, 384, 512, 512/224, 512/256
Digital Signature Scheme

Classic Hard Problem-based Signature Schemes:

No Algorithm
1 BLS Signature Scheme
2 Elliptic Curve Digital Signature Algorithm (ECDSA)
3 Elliptic Curve Schnorr DSA (ECSDSA)
4 RSA-PSS (RSA-Probabilistic Signature Scheme)
5 ShangMi2 (SM2)


Stateful Hash-based Signature Schemes:

No Algorithm
1 LMS
2 XMSS
3 XMSSMT
AKSA MySEAL 2.0 Neutral
Cryptographic algorithms that are in a transitional phase and conditionally approved by MySEAL Focus Group for limited use under strictly defined circumstances. They may be considered for future inclusion in the AKSA MySEAL Approved list upon further assessment and validation.
Cryptographic PrimitivesAlgorithms
Message Authentication Code (MAC)
  1. Cipher-based MAC (CMAC)?
  2. Counter with Cipher Block Chaining-Message Authentication Code (CCM)?
  3. Galois/Counter Mode (GCM) and GMAC
  4. Keyed-Hash Message Authentication Code (HMAC)
  5. SHA-3 Derived Functions: cSHAKE, KECCAK Message Authentication Code (KMAC), TupleHash, and ParallelHash
Cryptographic Hash FunctionSHA-256 with the following conditions:
  1. SHA-256 usage is sanctioned only until the year 2030.
  2. It is intended for specific hash purposes such as password hashing, digital signatures, and data integrity verification.
  3. Not recommended for message authentication purposes.
  4. It will be acknowledged as 80-bit security in Malaysia's scheme.
AKSA MySEAL 2.0 Legacy
Cryptographic algorithms intended solely for ensuring interoperability with legacy systems. These algorithms are not recommended by MySEAL Focus Group for general use due to potential vulnerabilities and its associated risks. If in use, listed cryptographic algorithms should be strictly monitored by the user.
Cryptographic PrimitivesAlgorithms
Symmetric Algorithms
  • Two-key TDEA Decryption
  • Three-key TDEA Decryption
  • SKIPJACK Decryption
Digital Signature Verification< 112 bits of security strength:
  • DSA: ((512 ? L < 2048) or (160 ? N < 224))
  • ECDSA: 160 ? len(n) < 224
  • RSA: 1024 ? len(n) < 2048
Hash Functions
  • SHA-1
MAC Algorithms
  • HMAC Verification: Key lengths < 112 bits
  • CMAC Verification: Two-key TDEA and Three-key TDEA



New Cryptographic Algorithm for MySEAL (AKBA MySEAL)

AKBA shortlists evaluated algorithms that are not included in any existing international standards, regional or national portfolios, or other cryptographic algorithm listing projects. The development of AKBA MySEAL commenced in December 2016 with a call for the submission of algorithms for six categories of primitive. Eventually, seven submissions were received under three categories. Out of the seven submissions, six were shortlisted for Phase II evaluation. One asymmetric encryption submission was withdrawn in Phase I. Subsequently, two out of the six submissions in Phase II were shortlisted as the finalist algorithms for Phase III evaluation. The two algorithms are the Rabin-p Key Encapsulation Mechanism and the TNC Signature Scheme as listed in the table below. Upon meticulous evaluation by the Evaluation Committee and intense discussions, both the algorithms under evaluation are not recommended to be shortlisted as AKBA MySEAL. However, these two algorithms will be considered in the next AKBA MySEAL evaluation.

Cryptographic Primitives Algorithm Name Algorithm Information Authors
Asymmetric Encryption Scheme Rabin-p KEM 1. Proposol
2. Presentation slide from AKBA MySEAL Seminar
3. IP Statement

1. Muhammad Asyraf Asbullah
2. Muhammad Rezal Kamel Ariffin
3. Zahari Mahad

Digital Signature Scheme TNC 1. Proposal
2. Presentation slide from AKBA MySEAL Seminar
3. IP Statement

1. Tan Shu Yuan
2. Ng Tiong Sik
3. Chin Ji Jian

Documents

Explore and access essential MySEAL documents, including criteria, guidelines, submission forms, and technical reports. Download the documents for more information about MySEAL.

Important Dates

New Cryptographic Algorithm for MySEAL – AKBA MySEAL


Year Date Activities
2017 16th December 2016 until 17th November Submission for new cryptographic algorithm
Quarter 1 until Quarter 4 Screening Process
2018 Quarter 2 Submission for new DRBG algorithm
2019 Quarter 1 Announcement of AKBA MySEAL candidates to public
Call for AKBA MySEAL Cryptanalysis Evaluation
Quarter 4 Submission of AKBA MySEAL Cryptanalysis Evaluation Report
2020 Quarter 3 Announcement of AKBA MySEAL to public
2024 30 January Focus Group meeting 01/2024
7 March AKBA MySEAL 2.0 Submission Announcement
October Focus Group meeting 02/2024
December Focus Group meeting 03/2024
2025 7 March Closing date AKBA MySEAL 2.0 Submission
Q2 Focus Group meeting 01/2025
1st phase of AKBA MySEAL 2.0 evaluation starts


Existing Cryptographic Algorithm for MySEAL – AKSA MySEAL


Year Date Activities
2016 22 December Selection of algorithms
2017 4-6 April 1st phase of AKSA MySEAL evaluation starts
8 Jun
  • 1st phase of AKSA MySEAL evaluation ends
  • 2nd phase of AKSA MySEAL evaluation starts
13 July Meeting for 2nd phase of AKSA MySEAL evaluation
August Announcement of the shortlisted AKSA MySEAL for 1st phase to Focus Group
November
  • 2nd phase of AKSA MySEAL evaluation ends
  • Announcement of AKSA MySEAL to Focus Group
December Announcement of AKSA MySEAL to public
2023 4 April Focus Group meeting 01/2023
27-29 May 1st phase of AKSA MySEAL 2.0 evaluation (Workshop 1)
5 July Focus Group meeting 02/2023
15-17 July 2nd phase of AKSA MySEAL 2.0 evaluation (Workshop 2)
28-30 October 2nd phase of AKSA MySEAL 2.0 evaluation (Workshop 3)
2024 30 January Focus Group meeting 01/2024
Q2 AKSA MySEAL 2.0 final list evaluation by external reviewer
Q2 Announcement of the AKSA MySEAL 2.0

Customer Engagement FAQ

What is MySEAL?

MySEAL is a cryptographic algorithm that is recognised and listed in the National Trusted Cryptographic Algorithm List (Senarai Algoritma Kriptografi Terpercaya Negara) in Malaysia.

What is the objective of MySEAL?

The primary objective of MySEAL is to provide a comprehensive list of cryptographic algorithms aligned with the National Cryptography Policy (NCP) while supporting advancements in cryptography and cryptanalysis.

What are the categories of cryptographic algorithms included in MySEAL?

MySEAL encompasses two categories of cryptographic algorithms: AKSA (Existing Cryptographic Algorithms) and AKBA (New Cryptographic Algorithms).

What distinguishes AKSA algorithms from AKBA algorithms?

AKSA algorithms are established cryptographic algorithms published in recognised standards or endorsed by reputable organisations, whereas AKBA algorithms are newly developed algorithms yet to be widely adopted.

Is MySEAL subject to any regulatory requirements or standards?

MySEAL may be subject to regulatory requirements or standards imposed by Malaysian authorities or relevant international bodies.

How does MySEAL promote the growth of the Malaysian cryptographic ecosystem?

MySEAL encourages local cryptographic experts and researchers to explore and develop novel algorithms, thereby contributing to the advancement of the cryptographic landscape in Malaysia.

What opportunities does the MySEAL initiative offer to participants, including researchers and industry players?

MySEAL provides a collaborative platform between government entities, industries, and higher institutions to promote the development of new cryptographic algorithms, nurturing talent and fostering innovation in the field.

Is MySEAL widely used internationally?

MySEAL's usage may be primarily within Malaysia or among entities that adhere to Malaysian cryptographic standards. Its international usage may depend on its adoption and recognition by other countries or organisations.

Can algorithms in MySEAL be integrated into software applications or systems?

Yes, algorithms in MySEAL can be integrated into software applications or systems that require cryptographic functionality. Integration may involve using libraries or APIs or implementing the algorithm according to its specifications.

When is the AKBA MySEAL 2.0 submission open?

AKBA MySEAL 2.0 is open for submission from 7th March 2024 and will end on 7th March 2025.

Where can I find more information about MySEAL?

Additional information about MySEAL, including technical documentation, specifications, and guidelines for its usage can be obtained from the MyKripto official website or can be requested from the MySEAL Secretariat.

Contact

For any enquiry please contact:
enquiry@cybersecurity.my

logo
CyberSecurity Malaysia is the national cyber security specialist agency under the purview of the Ministry of Digital (KD)
 
Contact Us

  • CyberSecurity Malaysia,
    Level 7 Tower 1, Menara Cyber Axis, Jalan Impact,
    63000 Cyberjaya, Selangor Darul Ehsan, Malaysia.

  • enquiry@cybersecurity.my

  • +603 - 8800 7999

  • +603 - 8008 7000

TOP