U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Publications

NIST Authors in Bold

Displaying 1 - 25 of 17259

Report on the Block Cipher Modes of Operation in the NIST SP 800-38 Series

September 10, 2024
Author(s)
Nicky Mouha, Morris J. Dworkin
… cryptography, block cipher, modes of operation, NIST SP 800-38A, NIST SP 800-38B, NIST SP 800-38C, NIST SP 800-38D, NIST SP 800-38E, NIST SP 800-38F … Report on the Block Cipher Modes of Operation in the NIST SP 800-38 Series …

PIV Middleware and PIV Card Application Conformance Test Guidance (SP 800-73 Compliance)

April 5, 2006
Author(s)
Ramaswamy Chandramouli, Levent Eyuboglu, Ketan Mehta
… [Superseded by SP 800-85A-1 (March 2009): … tests for the following classes of specification in SP 800-73: (a) End-Point Client-Application Programming Interface (Chapter 6 of SP 800-73). (b) End-Point PIV Card Application Card Command … derived test requirement, Personal Identity Verification, SP 800-73, test assertions …

NIST MEP CYBERSECURITY Self-Assessment Handbook for Assessing NIST SP 800-171 Security Requirements in Response to DFARS Cybersecurity Requirements

November 20, 2017
Author(s)
Patricia R. Toth
… This Handbook provides guidance on implementing NIST SP 800-171 in response to the Defense Federal Acquisition … systems against the security requirements in NIST SP 800-171 rev 1, "Protecting Controlled Unclassified … cybersecurity, security requirement, NIST SP 800-171 rev 1, NIST MEP, small manufacturer, DFARS …

Biometric Data Specification for Personal Identity Verification

January 17, 2007
Author(s)
Charles L. Wilson, Patrick J. Grother, Ramaswamy Chandramouli
… [Superseded by SP 800-76-2 (July 2013): … and practices included generically in published biometric standards. The primary design objective behind these … Federal Bureau of Investigation (FBI) background check, SP 800-76 references FBI documentation, including the …

PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 compliance)

April 13, 2016
Author(s)
David Cooper, Hildegard Ferraiolo, Ramaswamy Chandramouli, Jason Mohler
… Verification (PIV) identity credentials. This document, SP 800-85A, contains the test assertions and test procedures … of interoperability and PIV Card functions. [Supersedes SP 800-85A-2 (July 2010): … Card Application and Middleware Interface Test Guidelines (SP 800-73-4 compliance) …

NIST SP 800-63-4: Digital Identity Guidelines

August 1, 2025
Author(s)
David Temoshok, Yee-Yin Choong, Ryan Galluzzo, Marie LaSalle, Andrew Regenscheid, Diana Proud-Madruga, Sarbari Gupta, Naomi Lefkovitz
… NIST SP 800-63-4: Digital Identity Guidelines …

Applying NIST SP 800-53 to Industrial Control Systems

September 1, 2006
Author(s)
Stuart W. Katzke, Keith A. Stouffer, Marshall Abrams, David Norton, Joe Weiss
… Security Controls for Federal Information Systems to ICSs. SP 800-53 contains specifications for information security … to, or operated for, federal government agencies. SP 800-53 was developed for use with traditional IT systems; … is to clarify and rectify problems experienced in applying SP 800-53 to ICSs. Although several organizations are working …

Codes for the Identification of Federal and Federally-Assisted Organizations (NIST SP 800-87 v1.0, March 2007 edition)

March 7, 2007
Author(s)
William C. Barker, Hildegard Ferraiolo
… [Superseded by SP 800-87 Rev. 1 (April 2008): … credentials. This document, Special Publication 800-87 (SP 800-87), provides the organizational codes necessary to … code-change-requests from federal agencies. [Supersedes SP 800-87 v1.0 (January 2006): … of Federal and Federally-Assisted Organizations (NIST SP 800-87 v1.0, March 2007 edition) …

Codes for the Identification of Federal and Federally Assisted Organizations (NIST SP 800-87 v1.0, Jan. 2006 edition)

January 11, 2006
Author(s)
William C. Barker, Hildegard Ferraiolo
… [Superseded by SP 800-87 v1.0 (March 2007): … credentials. This document, Special Publication 800-87 (SP 800-87), provides the organizational codes necessary to … 10 code-change-requests from federal agencies. [Supersedes SP 800-87 v1.0 (October 2005): … of Federal and Federally Assisted Organizations (NIST SP 800-87 v1.0, Jan. 2006 edition) …

Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment Plans

June 29, 2010
Author(s)
Ronald S. Ross, L A. Johnson
… [Superseded by SP 800-53A Rev. 4 (December 2014): … Special Publication 800-53A, Revision 1 provides guidelines for developing … procedures that are consistent with Special Publication 800-53, Revision 3, Recommended Security Controls for Federal … in the system development life cycle. [Supersedes NIST SP 800-53A (July 2008): …

Extending the Cybersecurity Digital Thread with XForms

August 3, 2015
Author(s)
Joshua Lubell
… of good software for tailoring the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 security controls and exporting the result in a … Arcane Nontrivial Dataset, Industrial Control System, NIST SP 800-53, NIST SP 800-82 …

Discussion on the Full Entropy Assumption of the SP 800-90 Series

April 14, 2023
Author(s)
Darryl Buller, Aaron Kaufer, Allen Roginsky, Meltem Sonmez Turan
… The NIST SP 800-90 series [1][2][3] supports the generation of … can be measured in terms of entropy, which the NIST SP 800-90 series measures using min-entropy. A full-entropy … of generating and testing full-entropy bitstrings, the SP 800-90 series assumes that a bitstring has full entropy if …

Bridging the Gap between Standards on Random Number Generation: Comparison of SP 800-90 Series and AIS 20/31

January 29, 2026
Author(s)
Elaine Barker, John Kelsey, Kerry McKay, Johannes Mittmann, Matthias Peter, Werner Schindler, Meltem Sonmez Turan
… report studies the cryptographic random number generation standards and guidelines written by BSI and NIST, namely AIS 20/31 and SP 800-90 Series. The aim of this report is to compare these … and reduce and resolve inconsistencies in related standards. … Bridging the Gap between Standards on Random Number Generation: Comparison of SP …
Displaying 1 - 25 of 17259
Was this page helpful?