Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-57 Part 2 Rev. 1 (2nd Public Draft)

Recommendation for Key Management, Part 2: Best Practices for Key Management Organizations

Date Published: November 2018
Comments Due: February 18, 2019 (public comment period is CLOSED)
Email Questions to:

Planning Note (01/28/2019): The comment closing date has been extended to February 18, 2019 (originally Jan. 21st).


Elaine Barker (NIST), William Barker (Dakota Consulting)


NIST invites public comments on this second draft of Special Publication (SP) 800-57 Part 2 Rev. 1, Recommendation for Key Management Part 2: Best Practices for Key Management Organizations. Part 2 provides guidance when using the cryptographic features of current systems. This revision:

  1. identifies the concepts, functions and elements common to effective systems for the management of symmetric and asymmetric keys;
  2. identifies the security planning requirements and documentation necessary for effective institutional key management;
  3. describes key management specification requirements;
  4. describes cryptographic key management policy documentation that is needed by organizations that use cryptography; and
  5. describes key management practice statement requirements.



authentication; authorization; availability; backup; certification authority; compromise; confidentiality; cryptographic key; cryptographic module; digital signatures; encryption; integrity; inventory management; key information; key management; cryptographic key management policy; key recovery; private key; public key; public key infrastructure; security plan; symmetric key
Control Families

Access Control; Audit and Accountability; Contingency Planning; Media Protection; Planning; System and Communications Protection; System and Information Integrity


Draft (2nd) SP 800-57 Part 2 Rev. 1 (pdf)

Supplemental Material:
None available

Publication Parts:
SP 800-57 Part 1 Rev. 4
SP 800-57 Part 3 Rev. 1

Document History:
04/06/18: SP 800-57 Part 2 Rev. 1 (Draft)
11/20/18: SP 800-57 Part 2 Rev. 1 (Draft)
05/23/19: SP 800-57 Part 2 Rev. 1 (Final)