Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 3/21/2019 Status: Download: SP 800-56B Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56B Rev. 2 (July 2018)	Final	3/21/2019
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 Transitioning the Use of Cryptographic Algorithms and Key Lengths 3/21/2019 Status: Download: SP 800-131A Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-131A Rev. 2	Final	3/21/2019
SP	800-133 Rev. 1	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 1 (DRAFT) Recommendation for Cryptographic Key Generation 3/06/2019 Status: Download: SP 800-133 Rev. 1 (DRAFT) (DOI); Local Download	Draft	3/06/2019
NISTIR	8214	Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography NISTIR 8214 Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography 3/01/2019 Status: Download: NISTIR 8214 (DOI); Local Download; Diff file - shows changes from draft & public comment resolutions	Final	3/01/2019
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (DRAFT) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Download: SP 800-38G Rev. 1 (DRAFT) (DOI); Local Download; Block Cipher Techniques project	Draft	2/28/2019
ITL Bulletin		The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk ITL Bulletin The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk 2/28/2019 Status: Download: February 2019 ITL Bulletin	Final	2/28/2019
SP	800-177 Rev. 1	Trustworthy Email SP 800-177 Rev. 1 Trustworthy Email 2/26/2019 Status: Download: SP 800-177 Rev. 1 (DOI); Local Download; High Assurance Domains project	Final	2/26/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations 2/25/2019 Status: Download: SP 800-162 (DOI); Local Download	Final	2/25/2019
SP	1800-4	Mobile Device Security: Cloud and Hybrid Builds SP 1800-4 Mobile Device Security: Cloud and Hybrid Builds 2/21/2019 Status: Download: SP 1800-4 (DOI); Local Download; Web version; Project Homepage	Final	2/21/2019
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 (DRAFT) Attribute Considerations for Access Control Systems 2/13/2019 Status: Download: SP 800-205 (DRAFT) (DOI); Local Download	Draft	2/13/2019
Journal Article		Elliptic Curves Arising from Triangular Numbers Journal Article Elliptic Curves Arising from Triangular Numbers 2/01/2019 Status: Download: Volume 19 (w/ link to paper); Preprint	Final	2/01/2019
White Paper		[Project Description] Security for IoT Sensor Networks: Building Management Case Study White Paper (DRAFT) [Project Description] Security for IoT Sensor Networks: Building Management Case Study 2/01/2019 Status: Download: Project Description; Submit Comments; Project homepage	Draft	2/01/2019
NISTIR	8240	Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8240 Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process 1/31/2019 Status: Download: NISTIR 8240 (DOI); Local Download; NIST PQC Standardization homepage; Round 2 Submissions	Final	1/31/2019
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 12/20/2018 Status: Download: SP 800-37 Rev. 2 (DOI); Local Download	Final	12/20/2018
ITL Bulletin		Securing Wireless Infusion Pumps ITL Bulletin Securing Wireless Infusion Pumps 12/19/2018 Status: Download: December 2018 ITL Bulletin	Final	12/19/2018
NISTIR	8241	Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs NISTIR 8241 Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs 12/17/2018 Status: Download: NISTIR 8241 (DOI); Local Download	Final	12/17/2018
SP	800-189	Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation SP 800-189 (DRAFT) Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation 12/17/2018 Status: Download: SP 800-189 (DRAFT) (DOI); Local Download	Draft	12/17/2018
Book Section		Comprehensive Security Assurance Measures for Virtualized Server Environments Book Section Comprehensive Security Assurance Measures for Virtualized Server Environments 12/12/2018 Status: Download: Book Section (DOI); Preprint	Final	12/12/2018
Conference Proceedings		A Method-Level Test Generation Framework for Debugging Big Data Applications Conference Proceedings A Method-Level Test Generation Framework for Debugging Big Data Applications 12/10/2018 Status: Download: Conference Proceedings (DOI); Preprint	Final	12/10/2018
NISTIR	8011 Vol. 3	Automation Support for Security Control Assessments: Software Asset Management NISTIR 8011 Vol. 3 Automation Support for Security Control Assessments: Software Asset Management 12/06/2018 Status: Download: NISTIR 8011 Vol. 3 (DOI); Local Download	Final	12/06/2018
NISTIR	8196	Security Analysis of First Responder Mobile and Wearable Devices NISTIR 8196 (DRAFT) Security Analysis of First Responder Mobile and Wearable Devices 12/03/2018 Status: Download: NISTIR 8196 (DRAFT) (DOI); Local Download; Security Research Portfolio (from NIST's Public Safety Communications Research Division)	Draft	12/03/2018
Journal Article		The Trouble with Terms Journal Article The Trouble with Terms 12/01/2018 Status: Download: Journal Article (DOI); Preprint	Final	12/01/2018
Journal Article		Toward Cyberresiliency in the Context of Cloud Computing Journal Article Toward Cyberresiliency in the Context of Cloud Computing 12/01/2018 Status: Download: Journal Article (DOI); Preprint	Final	12/01/2018
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 (DRAFT) Securing Web Transactions: TLS Server Certificate Management 11/29/2018 Status: Download: SP 1800-16B (Prelim. Draft 1); SP 1800-16A (Prelim. Draft 1); Submit Comments; Project Homepage	Draft	11/29/2018
NISTIR	8200	Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) NISTIR 8200 Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) 11/29/2018 Status: Download: NISTIR 8200 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	11/29/2018

View All Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Quick Links

Publications

Recent Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Quick Links

Publications

Recent Publications

Computer Security
Resource Center