Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs

Published

Author(s)

Julie Haney, Mary Theofanos, Yasemin Acar, Sandra Spickard Prettyman

Abstract

Cryptography is an essential component of modern computing. Unfortunately, implementing cryptography correctly is a non-trivial undertaking. Past research studies have supported this observation by revealing a multitude of errors and pitfalls in the cryptographic implementations of software products. However, the emphasis of these studies was on the practices of less-experienced, individual developers. Therefore, there is little understanding the cryptographic development practices of organizations, including the benefits and challenges of using cryptographic resources such as standards specifications and libraries. To address this gap, a research team led by the National Institute of Standards and Technology (NIST) Information Technology Laboratory Visualization and Usability Group conducted a qualitative investigation into the processes and resources that organizations employ in the development and testing of cryptographic products. The study involved 21 in-depth interviews of participants representing organizations that develop either a security product that uses cryptography or a non-security product that heavily relies on cryptography. This paper categorizes and enumerates participant comments specific to NIST cryptographic publications and programs, with a goal of informing NIST's future decisions in this space.
Citation
NIST Interagency/Internal Report (NISTIR) - 8241
Report Number
8241

Keywords

cryptography, development, standards, testing, validation

Citation

Haney, J. , Theofanos, M. , Acar, Y. and Spickard Prettyman, S. (2018), Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8241 (Accessed October 24, 2021)
Created December 16, 2018, Updated October 12, 2021