Skip to content

Hash Function

What is Hash Function?

A mathematical algorithm that maps data of arbitrary size to a fixed-size output, used for data integrity verification and password storage.

Information Security

Frameworks that govern hash function

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on hash function

Requirements naming hash function across 4 standards, quoted from the control text.

Australian Information Security Manual1 control

When the pre-hashed variants of ML-DSA-65 and ML-DSA-87 are used, at least SHA-384 and SHA-512 respectively are used for pre-hashing.

ISM-1994 · Hash functions for pre-hashed ML-DSA →
Commercial National Security Algorithm Suite (CNSA) 2.02 controls

The Secure Hash Algorithm (FIPS 180-4) computes condensed representations of information using SHA-384 or SHA-512 to protect information up to TOP SECRET, as CNSSP 15 Annex B lists them among the general purpose algorithms;

commercial-national-security-algorithm-suite-cnsa-2-0::ALG-SHA · ALG-SHA SHA-384 or SHA-512 as the general-purpose hash; no SHA-3 or SHAKE for general use →
ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Dimension 6 Data Integrity per X.805 Clause 6.6: Data Integrity keeps data correct and accurate. Data are shielded from being altered, deleted, created or copied without authorization, and any such unauthorized activity is made detectable.

X805-Dim6-Data-Integrity-Correctness-Accuracy-Unauthorized-Modification-Deletion-Detection · ITU-T X.805 Security Dimension 6 - Data Integrity + Correctness + Accuracy + Unauthorized Modification Prevention + Deletion Detection + Hashing + HMAC + Digital Signatures + Merkle Trees + Blockchain Integrity + File Integrity Monitoring (FIM) →
NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205)1 control

Implement FIPS 205 SLH-DSA (Stateless Hash-Based Digital Signature Algorithm) based on SPHINCS+ for long-term signatures + use cases requiring cryptographic agility independent of lattice assumptions.

PQC-4 · FIPS 205 SLH-DSA Implementation - Stateless Hash-Based Digital Signature →

Questions people ask about hash function

What is Hash Function?
A mathematical algorithm that maps data of arbitrary size to a fixed-size output, used for data integrity verification and password storage.
Why is Hash Function important for compliance?
Hash Function is a key concept in Information Security. Understanding hash function helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Hash Function?
Hash Function appears in the requirement text of Australian Information Security Manual, Commercial National Security Algorithm Suite (CNSA) 2.0, ITU-T X.805 - Security Architecture for End-to-End Communications, NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205). Across these standards we have identified 5 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Hash Function?
Explore our compliance framework pages to see how hash function applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Hash Function applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.