Search CSRC

Authority: This work is being initiated pursuant to NIST’s responsibilities under the Federal Information Security Management Act (FISMA) of 2002, Public Law 107–347. Call for Additional Digital Signature Schemes for the Post-Quantum Cryptography Standardization Process (PDF) Closed June 1, 2023   Submission packages must be received by NIST by June 1, 2023. Submission packages received before March 1, 2023, will be reviewed for completeness by NIST; the submitters will be notified of any deficiencies by March 31, 2023, allowing time for deficient packages to be amended by the submission...

API Notes Intermediate Values KAT Source Code Files for KATs 

No workshops scheduled at this time.   Timeline *This is a tentative timeline, provided for information, and subject to change. Date   Sep 6, 2022 Call for Additional Digital Signature Schemes  June 1, 2023 Deadline for submissions July 17, 2023 Round 1 Additional Signatures announced (40 submissions accepted as "complete and proper") Oct 24, 2024 Round 2 Additional Signatures announced (14 algorithms) Jan 17, 2025 Deadline for updated submission packages for Second Round Candidates See Guidelines for...

NIST has set up a [email protected] mailing list. The mailing list will be used to discuss the standardization and adoption of secure, interoperable and efficient post-quantum algorithms.  You must be subscribed to send email to the mailing list.  Please use the instructions below to subscribe. To join: mailto:[email protected] You will receive a response message from [email protected].  Please click the "Join" link inside that email to confirm your subscription request. To unsubscribe: mailto:[email protected]   Mailing List...

[This page will automatically redirect to the main Post-Quantum Cryptography Standardization page. It does not work in the preview mode, however.]

Go to our PQC Digital Signature Schemes project.

An [email protected] email mailing list has been established for dialogue regarding NIST's RBG project. It is an unmoderated mailing list; messages addressed to this list are immediately distributed to all the addresses on the list. To join: mailto:[email protected] You will receive a response message from [email protected].  Please click the "Join" link inside that email to confirm your subscription request. To unsubscribe: mailto:[email protected]

Conference presentations on combinatorial methods for assured autonomy How Can we Provide Assured Autonomy?  International Conference on Cyber Security, Jan 8-10, 2024    PDF Assured Autonomy through Combinatorial Methods, 6th IEEE Conference on Dependable and Secure Computing, November 7-9, 2023.   PDF Combinatorial Coverage for Assured Autonomy.  The 1st IEEE International Workshop on Assured Autonomy, Artificial Intelligence and Machine Learning, Charlotte, October 31, 2022    PPT with audio narration   MP4 video Assured Autonomy - Problems and Solutions,  USAF Testing Colloquium,...

Validation Number: 147 Vendor: Naval Information Warfare Center (NIWC) Atlantic Product Name: SCAP Compliance Checker Product Major Version: 5 Product Version Tested: 5.6.0.1 Tested Platforms: Microsoft Windows 10 SP0 32-bit Microsoft Windows 10 SP0 64-bit Microsoft Windows Server 2012 R2 SP0 64-bit Red Hat Enterprise Linux 7 64-bit Apple Mac OS 10.11 (OS X El Capitan) SCAP 1.3 Capabilities: Authenticated Configuration Scanner Common Vulnerabilities and Exposures (CVE)...

NOTICES This is a beta release of the 2.0 Version of the Beacon Service. The first release and data is available at: NIST Randomness Beacon (Version 1.0) May 17, 2024, between 6:30-10:00PM ET new pulses from the Beacon Service may be unavailable. Any pulses generated during any interruption will be available as soon as all services are restored. NIST Randomness Beacon (Version 2.0 Beta) -- work in progress WARNING: DO NOT USE BEACON GENERATED VALUES AS SECRET CRYPTOGRAPHIC KEYS. This prototype implementation generates full-entropy bit-strings and posts them in blocks of 512 bits...

NOTICES The public key certificate used to verify beacon records expired on 7 May, 2017. The beacon signing key has also changed. Users can download the public key. Version 2.0 is described at NIST Randomness Beacon (Version 2.0 Beta) NIST Randomness Beacon (Prototype Implementation; Version 1.0) -- Replaced by Version 2.0 WARNING: DO NOT USE BEACON GENERATED VALUES AS SECRET CRYPTOGRAPHIC KEYS. This prototype implementation generates full-entropy bit-strings and posts them in blocks of 512 bits every 60 seconds. Each such value is sequence-numbered, time-stamped and signed, and...

NIST Randomness Beacon Demo Applications WARNING: DO NOT USE BEACON GENERATED VALUES AS SECRET CRYPTOGRAPHIC KEYS. A demonstration of what a pulse looks like is available at NIST Randomness Beacon (Version 2.0 Beta). Randomly order n The following application demonstrates how to allocate a random order for n resources. Examples of possible resources are a place in a queue, selection of a location, or assignment to some task. One possible application would be to assign numbers to the pool of resource users, then choose a pulse, enter the actual number for n, and then order resource...

The National Institute of Standards and Technology previously hosted a series of monthly educational workshops focused on the Open Security Controls Assessment Language (OSCAL). NOTE: These workshops are no longer being held and remain available as an archive of education resources for the OSCAL community. The purpose of these workshops is to improve OSCAL adoption by expanding the OSCAL community of interest (COI) through the onboarding of members who have no previous knowledge of OSCAL. By helping establish the foundation for security automation, with a particular focus on the continuous...

Secure Multiparty Computation (MPC) (Secure) Multiparty Computation (MPC) allows multiple parties to jointly (distributively) perform a computation, using everyone's inputs, but without actually sharing the private inputs with one another. Depending on the desired functionality, each party may also obtain a private output. MPC is one of the main techniques of interest to the PEC project. Reference material about MPC has been collected across a number of events, organized by PEC and MPTC. PEC-STPPA #2 (2021): including talks about PSI and MPC, and conversation. PEC-STPPA #6 (2023):...

The NIST OSCAL team hosts a series of mini workshops for the OSCAL community to learn, share, and connect. Each session explores topics of interest, highlights real-world OSCAL implementations, and gives community members an opportunity to present their work and exchange ideas. Most of the workshops are designed to be accessible to a broad audience and do not require deep technical knowledge of OSCAL. Discussions are interactive, with plenty of opportunities to ask questions and engage with presenters and the OSCAL team. If you are interested in presenting your OSCAL-related work or proposing...

On July 19, 2022, NIST announced its intention to update the series of special publications dedicated to the Protection of Controlled Unclassified Information (CUI). Many changes are actively under consideration reflecting the current thinking of NIST after extensive review and analyses of the public comments. Based on the feedback received, inputs from workshops and conferences, and discussions with federal agencies, the changes under consideration include: Streamlining the Introduction and Fundamentals sections of the document Withdrawing requirements that are either outdated, no longer...

The following table summarizes the SP 800-140x series publications and their relationships to ISO/IEC 19790:2012(E) and ISO/IEC 24759:2017(E) and links these to their associated supplemental information webpages.  NIST Special Publications (SPs) that Modify ISO/IEC Standards and supplemental info links NIST SP                            Title   ISO/IEC 19790:2012(E) ISO/IEC 24759:2017(E) Supplemental Info Link SP 800-140 FIPS 140-3 Derived Test Requirements (DTR) modifies -- §6.1 through  §6.12...

Short URL: https://csrc.nist.gov/projects/cmvp/sp800-140c The following information is referenced from Section 6.2, Approved Security Functions, of NIST SP 800-140Cr2. Transitions | Block Cipher | Digital Signature | Secure Hash Extendable Output Functions | Message Authentication | Entropy Source DRBG | RBG | Other Security Functions | Change Log 6.2.1 Transitions Barker EB, Roginsky AL (2019) Transitioning the Use of Cryptographic Algorithms and Key Lengths. (National Institute of Standards and Technology, Gaithersburg, MD), NIST Special Publication (SP) 800-131A, Rev. 2....

Short URL: https://csrc.nist.gov/projects/cmvp/sp800-140d The following information is referenced from Section 6.2, Sensitive security parameter generation and establishment methods, of NIST SP 800-140Dr2. Transitions | Symmetric Key Gen. | Key-Based Key Derivation Password-Based Key Deriv. | Asymmetric Key-Pair Gen. Key Agreement | Key Agreement Key Deriv. | Protocol-Suite Key Deriv. Key Transport | Key-Encapsulation Mech. | Entropy Source | DRBG | RBG | Other SSPEM | Change Log 6.2.1 Transitions Barker EB, Roginsky AL (2019) Transitioning the Use of Cryptographic Algorithms and Key...

The NIST PQC team will host talks -- open to the public -- relating to the NIST PQC standardization process. To propose a talk, please send an email to Dr. Maxime Bros at [email protected] To subscribe to the mailing list and get notifications about coming talks, please send an email to [email protected] (more detailed instructions here). Instructions to connect (PDF) # Date Speaker Title Media 22 January 7, 2025 10:00am - 11:00am** Dr. Sarah Arpin, Virginia Polytechnic Institute and State University, USA and...

Fully-Homomorphic Encryption (FHE) is a main tool of Privacy-Enhancing Cryptography (PEC), alongside with Multi-Party Computation (MPC), Zero-Knowledge Proofs (ZKP), Private-Set Intersection (PSI), and others. FHE in particular allows computing arbitrary functions over encrypted data, without knowing the secret key. The NIST PEC project is accompanying FHE developments and initiatives toward future useful standards. FHE is considered in category S5 of the NIST Threshold Call (NISTIR 8214C). Three presentations (3b3, 3b4, 3b5), including two FHE-related previews of upcoming submissions were...

Property based testing deals with the test oracle problem by specifying a set of properties that can be checked automatically after a test.  For example, a property to check for a bank deposit transaction might be "transaction_amount > 0 && new_balance == old_balance + transaction_amount".  After a set of properties are defined, random values (within a specified range) can be applied and output checked against the properties. Combinatorial test methods can make this process both more efficient and more thorough.  Instead of applying random values, t-way combinations of values can be used....

Physical Unclonable Function (PUF) Vulnerabilities Combination frequency differencing (CFD) can be used to analyze the susceptibility of physical unclonable functions (PUFs) to machine learning attacks. Preliminary results suggest that the method may be useful for identifying bit combinations that have a disproportionately strong influence on PUF response bit values. Kuhn, D. R., Raunak, M. S., Prado, C., Patil, V. C., & Kacker, R. N. (2022, April). "Combination Frequency Differencing for Identifying Design Weaknesses in Physical Unclonable Functions". In 2022 IEEE International Conference...

A [email protected] email list has been established for dialogue regarding NIST's Cipher Modes project.  Use the following link to subscribe/unsubscribe: https://groups.google.com/a/list.nist.gov/g/ciphermodes-forum