Search CSRC

Abstract: This recommendation specifies four types of SHA-3-derived functions: cSHAKE, KMAC, TupleHash, and ParallelHash, each defined for 128-and 256-bit security strengths. cSHAKE is a customizable variant of the SHAKE function, as defined in Federal Information Processing Standards publication (FIPS) 202....

Abstract: The Cryptographic Module Validation Program (CMVP) validates third-party assertions that cryptographic module implementations satisfy the requirements of Federal Information Processing Standards (FIPS) Publication 140-3, Security Requirements for Cryptographic Modules. The current cryptographic modu...

Abstract: This white paper is part of a series called Applying 5G Cybersecurity and Privacy Capabilities, which covers 5G cybersecurity- and privacy-supporting capabilities that were implemented as part of the 5G Cybersecurity testbed at the National Cybersecurity Center of Excellence (NCCoE). This white pape...

Abstract: This document provides guidelines on how to secure operational technology (OT) while addressing their unique performance, reliability, and safety requirements. OT encompasses a broad range of programmable systems and devices that interact with the physical environment, such as industrial control sys...

Abstract: The NIST Cybersecurity Framework (CSF) 2.0 is a tool to help organizations manage risk in their operations. The CSF can also be used to develop a profile for communities that have similar risks in their operations. These community profiles can help individual members adapt the CSF to their own inter...

Abstract: This guide provides small business owners and operators with a high-level overview of NIST Special Publication (SP) 800-171Ar3 (Revision 3), Assessing Security Requirements for Controlled Unclassified Information.

Abstract: This report provides implementation guidelines to help federal agencies and cloud service providers (CSPs) protect identity tokens, access tokens, and assertions from forgery, theft, and misuse. Building on updates to NIST SP 800-53 (Release 5.1.1), it outlines principles for CSPs and consuming agen...

Abstract: Manufacturing supply chains are vital to national security and economic resilience. As these networks become increasingly complex, tracing products back to their origins becomes more difficult and exposes acquirers to greater risks from logistical disruptions, fraud, and counterfeit materials. To ad...

Abstract: Block cipher modes of operation specify how an approved block cipher, such as the Advanced Encryption Standard (AES), is applied to provide cryptographic protection for particular applications, including storage encryption where data is organized in fixed-size units and encrypted without data expans...

Abstract: The Sustainable Hardware Security (SUSHI@NIST) Workshop on January 26, 2026, convened stakeholders from industry, academia, and government to identify priorities and develop actionable recommendations for advancing hardware security across the semiconductor ecosystem. This report summarizes the work...

Abstract:

Abstract: Securing sensitive data within databases is a paramount concern for modern applications. Traditional database access control mechanisms often fall short in providing the fine-grained control and centralized management required to mitigate evolving security threats. This paper examines the limitation...

Abstract: Informative References identify relationships between elements of different source documents and can be consumed in human- or machine-readable formats. For example, within the CSF 2.0, each informative reference indicates one or more parts of another document in which readers can find additional inf...

Abstract: Working group participants submitted challenges, which were aggregated and reviewed. The challenges were first categorized as either security- or authorization-related, and then as functional or technical. Multi-cloud environments present unique security challenges arising from using multiple CSPs a...

Abstract:

Abstract: This concept paper introduces NIST’s goal to publish guidelines and resources to assist organizations and professionals in addressing the human aspects of cybersecurity, collectively known as human-centered cybersecurity.

Abstract: This white paper is part of a series called Applying 5G Cybersecurity and Privacy Capabilities, which covers 5G cybersecurity- and privacy-supporting capabilities that were implemented as part of the 5G Cybersecurity testbed at the National Cybersecurity Center of Excellence (NCCoE). This white pape...

Abstract: This document is a Cybersecurity Framework (CSF) Community Profile developed to support United States-based transit agencies. This “Transit Profile” is aligned with transit sector priorities and best practices and can be used as a guide for prioritizing cybersecurity activities and outco...

Abstract: This report summarizes the discussion at the first “Cyber AI Profile Workshop” in April 2025 during which NIST sought feedback toward the development of a NIST Cybersecurity Framework Community Profile for AI. The Cyber AI Profile will provide guidelines for managing cybersecurity risks...