NIST Special Publication 800-63B
Teks penuh
Gambar
Garis besar
Dokumen terkait
‘‘Nothing in this subchapter, section 11331 of title 40, or section 20 of the National Standards and Technology Act (15 U.S.C. 278g– 3) may be construed as affecting the authority
Some of these harms (e.g., financial loss or release of personal information) are described in each assurance level; others depend on the agency's programmatic interests. The
CMAC is also an approved mode of the Triple Data Encryption Algorithm (TDEA) [10]; however, as discussed in Appendix B, the recommended default message span for TDEA is much more
Agencies may employ other risk mitigation measures and compensating controls not specified herein. Agencies need to ensure that any mitigations and compensating controls do not
The IdP SHALL NOT disclose information on subscriber activities at an RP to any party, nor use the subscriber’s information for any purpose other than federated authentication,
5.4 Therefore, whenever a password is changed, any data that is protected by the retiring password shall be recovered (e.g., decrypted) using the appropriate DPK that is
The cSHAKE, KMAC, TupleHash, and ParallelHash functions are defined to accept a wide range of possible inputs (including unreasonably long inputs, and inputs involving fractional
1) state_handle: A pointer or index that indicates the internal state to be reseeded. If a state handle is not used by an implementation because the implementation does not support
