Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

New NIST Security Standard Can Protect Credit Cards, Health Information



Morris J. Dworkin, Larry Feldman, Gregory A. Witte


This bulletin summarizes the information presented in NIST Special Publication (SP) 800-38G, "Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption." The publication specifies two methods for format-preserving encryption, FF1 and FF3.
ITL Bulletin - April 2016
Report Number
April 2016


block cipher, confidentiality, encryption, FF1, FF3, format-preserving encryption, information security, mode of operation


Dworkin, M. , Feldman, L. and Witte, G. (2016), New NIST Security Standard Can Protect Credit Cards, Health Information, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed June 17, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created April 14, 2016, Updated February 19, 2017