Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Announcement of Proposal to Revise NIST SP 800-132, Recommendation for Password-Based Key Derivation: Part 1: Storage Applications

NIST is proposing to revise NIST Special Publication 800-132. Please submit public comments by May 1, 2023.

In January 2023, NIST’s Crypto Publication Review Board initiated a review of NIST Special Publication (SP) 800-132, Recommendation for Password-Based Key Derivation: Part 1: Storage Applications (December 2010).

In response to the public comments received, NIST proposes to revise SP 800-132,

  • to approve an additional memory-hard password-based key derivation function and password hashing scheme, and
  • to provide additional guidelines and clarifications on the use of PBKDF2.

Submit your comments on this decision proposal by May 1, 2023, to cryptopubreviewboard [at] nist.gov (subject: Comments%20on%20SP%20800-132%20Decision%20Proposal) (cryptopubreviewboard[at]nist[dot]gov) with "Comments on SP 800-132 Decision Proposal" in the subject line.

Comments received in response to this request will be posted on the Crypto Publication Review Project site after the due date. Submitters’ names and affiliations (when provided) will be included, while contact information will be removed. See the project site for additional information about the review process.

Released March 31, 2023