Special Publication (NIST SP)

Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography

April 16, 2018

Author(s)

Elaine B. Barker, Lidong Chen, Allen L. Roginsky, Apostol T. Vassilev, Richard Davis

This Recommendation specifies key-establishment schemes based on the discrete logarithm problem over finite fields and elliptic curves, including several...

Recommendation for Key-Derivation Methods in Key-Agreement Schemes

April 16, 2018

Author(s)

Elaine B. Barker, Lidong Chen

This Recommendation specifies techniques for the derivation of keying material from a shared secret established during a key-establishment scheme defined in...

Technical Review of NISTs Free Standard Reference Data Products

April 9, 2018

Author(s)

Debra L. Kaiser, Robert J. Hanisch

Over the past two years, the ODI has undertaken an ambitious effort to modernize the SRD Program. This report covers one aspect of this modernization effort, a...

Report on the NIST/DHS/FDA Workshop: Standards for Pathogen Detection for Biosurveillance and Clinical Applications

April 5, 2018

Author(s)

Scott Jackson, Jason Kralj, Nancy Lin

The 2017 NIST/DHS/FDA Workshop: Standards for Pathogen Detection for Biosurveillance and Clinical Applications brought together subject matter experts from the...

Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems [including updates as of 3-21-2018]

March 21, 2018

Author(s)

Ronald S. Ross, Michael McEvilley, Janet C. Oren

With the continuing frequency, intensity, and adverse consequences of cyber-attacks, disruptions, hazards, and other threats to federal, state, and local...

Certification of Standard Reference Material® 2372a Human DNA Quantitation Standard

March 19, 2018

Author(s)

Erica L. Romsos, Margaret C. Kline, Natalia Farkas, David L. Duewer, Blaza Toman

Standard Reference Material (SRM) 2372a is intended for use in the value assignment of human genomic deoxyribonucleic acid (DNA) forensic quantitation materials...

Fog Computing Conceptual Model

March 14, 2018

Author(s)

Michaela Iorga, Larry Feldman, Robert Barton, Michael J. Martin, Nedim S. Goren, Charif Mahmoudi

Managing the data generated by Internet of Things (IoT) sensors and actuators is one of the biggest challenges faced when deploying an IoT system. Traditional...

Workshop Report: Research Roadmap for Reducing the Fire Hazard of Materials in the Future

March 8, 2018

Author(s)

Rick Davis, Mauro Zammarano, Nathan D. Marsh

NIST hosted workshop, Future Needs for Reducing the Fire Hazard of Materials, provided an opportunity for worlds experts to come together to discuss the...

Evaluation of Cloud Computing Services Based on NIST SP 800-145

February 23, 2018

Author(s)

Eric Simmon

This document provides clarification for qualifying a given computing capability as a cloud service by determining if it aligns with the NIST definition of...

Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations [including updates as of 02-20-2018]

February 20, 2018

Author(s)

Ronald S. Ross, Patrick Viscuso, Gary Guissanie, Kelley L. Dempsey, Mark Riddle

[Superseded by SP 800-171 Rev. 1 (December 2016, updated 06/07/2018): https://doi.org/10.6028/NIST.SP.800-171r1] The protection of Controlled Unclassified...

National Checklist Program for IT Products--Guidelines for Checklist Users and Developers

February 15, 2018

Author(s)

Stephen Quinn, Murugiah Souppaya, Melanie R. Cook, Karen A. Scarfone

A security configuration checklist is a document that contains instructions or procedures for configuring an information technology (IT) product to an...

The Technical Specification for the Security Content Automation Protocol (SCAP) Version 1.3

February 14, 2018

Author(s)

David A. Waltermire, Stephen D. Quinn, Harold Booth, Karen Scarfone, Dragos Prisaca

The Security Content Automation Protocol (SCAP) is a suite of specifications that standardize the format and nomenclature by which software flaw and security...

SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3

February 14, 2018

Author(s)

Harold Booth, David A. Waltermire, Mark L. Badger, Melanie R. Cook, Stephen Quinn, Karen Scarfone

The Security Content Automation Protocol (SCAP) is a multi-purpose framework of component specifications that support automated configuration, vulnerability...

Future Generation Wireless R&D Gaps Report

February 5, 2018

Author(s)

Nada T. Golmie

This report identifies and describes several of the most significant gaps within various components of the wireless industry. This report is intended to serve...

SRM NIST Standard Reference Materials Catalog January 2018

February 1, 2018

Author(s)

Gina Montgomery

Security Recommendations for Hypervisor Deployment on Servers

January 23, 2018

Author(s)

Ramaswamy Chandramouli

The Hypervisor is a collection of software modules that provides virtualization of hardware resources (such as CPU/GPU, Memory, Network and Storage) and thus...

Domain Name System-Based Electronic Mail Security

January 15, 2018

Author(s)

Scott W. Rose, Karen M. Waltermire, Santos Jha, Chinedum Irrechukwu, William C. Barker

This document describes a security platform for trustworthy email exchanges across organizational boundaries. The project includes reliable authentication of...

Recommendation for the Entropy Sources Used for Random Bit Generation

January 10, 2018

Author(s)

Meltem Sonmez Turan, Elaine Barker, John Kelsey, Kerry McKay, Mary L. Baish, Mike Boyle

This Recommendation specifies the design principles and requirements for the entropy sources used by Random Bit Generators, and the tests for the validation of...

Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems [including updates as of 1-03-2018]

January 3, 2018

Author(s)

Ronald S. Ross, Michael McEvilley, Janet C. Oren

With the continuing frequency, intensity, and adverse consequences of cyber-attacks, disruptions, hazards, and other threats to federal, state, and local...

Guide to LTE Security

December 21, 2017

Author(s)

Jeffrey A. Cichonski, Joshua M. Franklin, Michael J. Bartock

Cellular technology plays an increasingly large role in society as it has become the primary portal to the internet for a large segment of the population. One...

A workshop report on Electron Microscopy Frontiers: Challenges and Opportunities

December 21, 2017

Author(s)

June W. Lau, John E. Bonevich, Andrew A. Herzing, Ann C. Chiaramonti Debay, Robert R. Keller

For two days beginning on March 8, 2017, a planning workshop entitled Electron Microscopy Frontiers: Opportunities and Challenges was hosted by the Material...

Road Mapping Workshop Report on Overcoming Barriers to Adoption of Composites in Sustainable Infrastructure

December 20, 2017

Author(s)

Richard J. Sheridan, Jeffrey W. Gilman, John Busel, David Hartman, Gale Holmes, Daniel Coughlin, Paul Kelley, Dustin Troutman, Jim Gutierrez, Charles Bakis, Robert Moser, Ellen Lackey, James R. Fekete, Stephanie Watson, Jae Hyun Kim, Aaron Forster, Ajay Krishnamurthy, Bharath N. Natarajan, William O'Donnell

The February 2017 "Road Mapping Workshop on Overcoming Barriers to Adoption of Composites in Infrastructure" brought together designers, manufacturers...

Certification of Standard Reference Material® 968f Fat-Soluble Vitamins in Frozen Human Serum

December 14, 2017

Author(s)

Jeanice M. Brown Thomas, David L. Duewer, Carolyn Q. Burdette, Lorna T. Sniegoski, James H. Yen

Standard Reference Material (SRM) 968f is intended for use in validating methods for determining fat soluble vitamins in human serum and plasma and value...

Guide Brief 13 - Resilience Gaps - Identifying and Prioritizing Closure of Resilience Gaps

December 7, 2017

Author(s)

Community Resilience Program NIST

This Guide Brief aims to assist the collaborative planning team with Step 4, Plan Development, by supporting communities in identifying resilience gaps using...

Digital Identity Guidelines: Federation and Assertions [including updates as of 12-01-2017]

December 1, 2017

Author(s)

Paul A. Grassi, Ellen M. Nadeau, Justin P. Richer, Sarah K. Squire, James L. Fenton, Naomi Lefkovitz, Jamie M. Danker

This document and its companion documents, SP 800-63, SP 800-63A, and SP 800-63B, provide technical and procedural guidelines to agencies for the implementation...

Digital Identity Guidelines [including updates as of 12-01-2017]

December 1, 2017

Author(s)

Paul A. Grassi, James L. Fenton, Michael E. Garcia

These guidelines provide technical requirements for federal agencies implementing digital identity services and are not intended to constrain the development or...

Digital Identity Guidelines: Enrollment and Identity Proofing Requirements [including updates as of 12-01-2017]

December 1, 2017

Author(s)

Paul A. Grassi, Naomi Lefkovitz, James L. Fenton, Jamie M. Danker, Yee-Yin Choong, Kristen Greene, Mary Theofanos

These guidelines provide technical requirements for federal agencies implementing digital identity services and are not intended to constrain the development or...

Digital Identity Guidelines: Authentication and Lifecycle Management [including updates as of 12- 01-2017]

December 1, 2017

Author(s)

Paul A. Grassi, Ray Perlner, Elaine M. Newton, Andrew Regenscheid, William E. Burr, Justin P. Richer, Naomi Lefkovitz, Jamie M. Danker, Mary Theofanos

These guidelines provide technical requirements for federal agencies implementing digital identity services and are not intended to constrain the development or...

Protocol for Collecting and Quantifying Release from Weathered Epoxy-Nanosilica Coatings: Using a Simulated Rain Method and Inductively Coupled Plasma-Optical Emission Spectrometry

November 30, 2017

Author(s)

Savelas A. Rabb, Lee L. Yu, Deborah S. Jacobs, Tinh Nguyen, Li Piin Sung

Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations [including updates as of 11-28-2017]

November 28, 2017

Author(s)

Ronald S. Ross, Patrick Viscuso, Gary Guissanie, Kelley L. Dempsey, Mark Riddle

[Superseded by SP 800-171 Rev. 1 (December 2016, updated 02/20/2018): https://doi.org/10.6028/NIST.SP.800-171r1] The protection of Controlled Unclassified...