• Date Published: October 21, 2024
• Comments Due: Not specified
• Email Questions to: Not specified
• Planning Note (01/17/2025): The file of public comments received has been updated.
• Author(s): Not mentioned
• Announcement: NIST offers cryptographic key management guidance including defining and implementing procedures, using suitable algorithms to protect sensitive info, and planning for crypto use changes due to algorithm breaks or more powerful computing. This publication guides the transition to stronger keys and more robust algorithms. The revision suggests retiring ECB as a confidentiality mode and using DSA for digital signature generation, along with a schedule for retiring SHA-1 and 224-bit hash functions. It also discusses the transition from 112-bit to 128-bit security strength and quantum-resistant algorithms for digital signatures and key establishment. (Note: A call for patent claims is on page iii. For more info, see Information Technology Laboratory (ITL) Patent Policy – Inclusion of Patents in ITL Publications.)
• Keywords: cryptographic algorithm, digital signature, elliptic curves, encryption, entropy, extendable output functions, hash function, key agreement, key-derivation functions, key encapsulation, key transport, key wrapping, message authentication codes, quantum-resistant algorithms, random bit generation, security strength, transition
• Control Families: None selected