Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations

Published

Author(s)

Kerry A. McKay, David A. Cooper

Abstract

Transport Layer Security (TLS) provides mechanisms to protect data during electronic dissemination across the Internet. This Special Publication provides guidance to the selection and configuration of TLS protocol implementations while making effective use of Federal Information Processing Standards (FIPS) and NIST-recommended cryptographic algorithms. It requires that TLS 1.2 configured with FIPS-based cipher suites be supported by all government TLS servers and clients and requires support for TLS 1.3 by January 1, 2024. This Special Publication also provides guidance on certificates and TLS extensions that impact security.
Citation
Special Publication (NIST SP) - 800-52 Rev. 2
Report Number
800-52 Rev. 2

Keywords

information security, network security, SSL, TLS, Transport Layer Security

Citation

McKay, K. and Cooper, D. (2019), Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-52r2 (Accessed April 18, 2024)
Created August 29, 2019, Updated October 31, 2019