Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Announcement of Proposal to Revise NIST SP 800-132, Recommendation for Password-Based Key Derivation: Part 1: Storage Applications
March 31, 2023

In January 2023, NIST’s Crypto Publication Review Board initiated a review of NIST Special Publication (SP) 800-132, Recommendation for Password-Based Key Derivation: Part 1: Storage Applications (December 2010).

In response to the public comments received, NIST proposes to revise SP 800-132,

  • to approve an additional memory-hard password-based key derivation function and password hashing scheme, and
  • to provide additional guidelines and clarifications on the use of PBKDF2.

Submit your comments on this decision proposal by May 1, 2023, to with "Comments on SP 800-132 Decision Proposal" in the subject line.

Comments received in response to this request will be posted on the Crypto Publication Review Project site after the due date. Submitters’ names and affiliations (when provided) will be included, while contact information will be removed. See the project site for additional information about the review process.

Parent Project

See: Crypto Publication Review Project

Related Topics

Security and Privacy: key management

Created March 31, 2023