1) This revision of NIST Special Publication 800-81 (Identified as Special Publication 800-81-2, Secure Domain Name System (DNS) Deployment Guide) adds two new sections — one to provide guidance on secure set up of recursive DNS service and the other for securely configuring validating resolvers. It also incorporates knowledge gained from DNSSEC deployment experience to provide some updated guidance for DNS Administrators on cryptographic algorithm variables, configuration and operations.
2) Many of the security capabilities associated with exercise of cloud service features in the three primary service models — Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as a Service (IaaS), involve cryptographic operations. This document NIST Interagency Report (NISTIR) 7956, Cryptographic Key Management Issues & Challenges in Cloud Services, analyzes and discusses various cryptographic key management challenges for performing these cryptographic operations in the context of architectural solutions that are commonly deployed for those operations.