Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Information Technology Laboratory

Computer Security Division

News and Updates

Keyword

Topic Area

Analyzing Collusion Threats in the Semiconductor Supply Chain | NIST Cybersecurity White Paper 46

June 30, 2025

Guidelines for API Protection for Cloud-Native Systems | NIST Releases SP 800-228

June 27, 2025

Proposed Withdrawal of FIPS 198-1, Keyed-Hash Message Authentication Code (HMAC)

June 23, 2025

End-of-Life Announcement: NIST SCAP Validation Program

June 17, 2025

End-of-Life Announcement: NIST SCAP Validation Program The National Institute of Standards and Technology (NIST) announces the phased conclusion of the Security...

NIST Launches Development of Cryptographic Accordions

June 6, 2025

A cryptographic accordion is a tweakable block cipher mode that is itself a cipher on variable-length input. NIST proposes to develop three general-purpose...

Metrics and Methodology for Hardware Security Constructs | NIST Publishes Cybersecurity White Paper 45

June 5, 2025

Although hardware is commonly believed to be security-resilient, it is often susceptible to vulnerabilities that arise from design and implementation flaws...

Open for Public Comment | Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems

June 4, 2025

NIST has released the initial public draft (ipd) of Special Publication (SP) 800-18r2 (Revision 2), Developing Security, Privacy, and Cybersecurity Supply Chain...

Likely Exploited Vulnerabilities: NIST Publishes Cybersecurity White Paper 41

May 19, 2025

Organizations need a clear metric for predicting and quickly responding to both software and hardware vulnerabilities. Prioritizing those vulnerabilities that...

Just Published | NIST’s FY 2024 Cybersecurity & Privacy Program Annual Report

April 28, 2025

In FY 2024, the Information Technology Laboratory’s (ITL) Cybersecurity and Privacy Program successfully responded to numerous challenges and opportunities in...

NIST Publishes IR 8552: Requirements for Cryptographic Accordions

April 11, 2025

NIST announces the release of NIST Interagency Report (IR) 8552 Requirements for Cryptographic Accordions as an outgrowth of the public workshop that NIST...

NIST Proposes to Withdraw SP 800-102, Recommendation for Digitial Signature Timeliness

April 10, 2025

In November 2024, NIST's Crypto Publication Review Board initiated a review of NIST Special Publication 800-102, Recommendation for Digital Signature Timeliness...

NIST to Revise Special Publications 800-38B, "CMAC" and 800-38C, "CCM"

April 10, 2025

In June 2024, NIST's Crypto Publication Review Board announced the review of the following publications: SP 800-38B, Recommendation for Block Cipher Modes of...

NIST Revises SP 800-61: Incident Response Recommendations and Considerations for Cybersecurity Risk Management

April 3, 2025

Incident response is a critical part of cybersecurity risk management and should be integrated across organizational operations. The six Functions of the NIST...

NIST First Call for Multi-Party Threshold Schemes | IR 8214C 2pd Available for Public Comments

March 27, 2025

NIST requests public comments on NIST IR 8214C 2pd (second public draft), NIST First Call for Multi-Party Threshold Schemes, which will help the NIST Multi...

Guidelines for API Protection for Cloud-Native Systems | Draft SP 800-228 Available for Public Comment

March 25, 2025

The initial public draft (ipd) of NIST Special Publication (SP) 800-228, Guidelines for API Protection for Cloud-Native Systems, is now available for public...

NIST Trustworthy and Responsible AI Report Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations

March 24, 2025

Artificial Intelligence (AI) systems have been on a global expansion trajectory, with the pace of development and the adoption of AI systems accelerating in...

SHA-3 | NIST to Update FIPS 202 and Revise Special Publication 800-185

March 12, 2025

In July 2023, NIST's Crypto Publication Review Board initiated a review of the following publications: Federal Information Processing Standard (FIPS) 202,  SHA...

NIST PQC Standardization Process | HQC Announced as a 4th Round Selection

March 11, 2025

After a thorough evaluation in the Fourth Round of the NIST Post-Quantum Cryptography (PQC) Standardization Process, NIST has selected HQC for standardization...

NIST Selects HQC as Fifth Algorithm for Post-Quantum Encryption

March 11, 2025

The new algorithm will serve as a backup for the general encryption needed to protect data from quantum computers developed in the future.

Considerations for Achieving Crypto Agility: NIST Releases CSWP 39 for Public Comment

March 5, 2025

Advances in computing capabilities, cryptographic research, and cryptanalytic techniques periodically create the need to replace algorithms that no longer...

A Security Perspective on the Web3 Paradigm | NIST IR 8475

February 25, 2025

NIST has published Internal Report (IR) 8475, A Security Perspective on the Web3 Paradigm. Since its inception, the internet has constantly developed and...

Open for Public Comment | NIST Publication on Testable Controls and Security Capabilities for Continuous Monitoring (Vol. 1)

February 20, 2025

The NIST Risk Management Framework (RMF) Team has released the initial public draft (ipd) of NIST Interagency Report (IR) 8011v1r1 (Volume 1, Revision 1)...

Was this page helpful?