Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-56C Rev. 2

Recommendation for Key-Derivation Methods in Key-Establishment Schemes

Date Published: August 2020

Supersedes: SP 800-56C Rev. 1 (04/16/2018)


Elaine Barker (NIST), Lily Chen (NIST), Richard Davis (NSA)



expansion; extraction; extraction-then-expansion; hash function; key derivation; key establishment; message authentication code
Control Families

System and Communications Protection


Download URL

Supplemental Material:
Comments received on Draft SP 800-56C Rev. 2 (pdf)

Publication Parts:
SP 800-56A Rev. 3
SP 800-56B Rev. 2

Document History:
03/24/20: SP 800-56C Rev. 2 (Draft)
08/18/20: SP 800-56C Rev. 2 (Final)


Security and Privacy

key management