ARCHIVED NEWS PAGE for PIV PROJECT

ERRATA for FIPS 201

• April 25, 2005: NIST Special Publication 800-78, Cryptographic Algorithms and Key Sizes for Personal Identity Verification, is now available. This document contains the technical specifications needed for the mandatory and optional cryptographic keys specified in FIPS 201 as well as the supporting infrastructure specified in FIPS 201 and the related Special Publications 800-73, Interfaces for Personal Identity Verification, and 800-76, Biometric Data Specification for Personal Identity Verification, that rely on cryptographic functions.
   
• April 12, 2005: Special Publication 800-73 has been updated and an updated .pdf file is now available on the Special Publications page. An errata sheet also has been posted as well (both files posted April 12, 2005). The original release of SP 800-73 was April 8th.

• April 8, 2005: NIST is pleased to announce the release of Special Publication 800-73, Interfaces for Personal Identity Verification. SP 800-73 provides the specifications for interfacing with the Personal Identity Verification (PIV) Card as specified in FIPS 201. SP 800-73 provides a streamlined, ISO compliant unified card edge independent of the underlying card platform technology.
   
• April 8, 2005 -- OMB has published a request for comments in the Federal Register on their draft agency implementation guidance for HSPD #12. Comments are due to OMB by May 9, 2005.
   
• March 28, 2005 -- NIST Special Publication 800-78, Cryptographic Algorithms and Key Sizes for Personal Identity Verification, is now available for a two week public comment period. This document contains the technical specifications needed for the mandatory and optional cryptographic keys specified in FIPS 201 as well as the supporting infrastructure specified in FIPS 201 and the related Special Publications 800-73, Interfaces for Personal Identity Verification, and 800-76, Biometric Data Specification for Personal Identity Verification, that rely on cryptographic functions. Please submit comments using the comment template form provided on the website. Comments should be submitted to DraftFips201@nist.gov with "Comments on Public Draft SP 800-78" in the subject line. It is requested that Federal organizations submit one consolidated/coordinated set of comments. The comment period closes at 5:00 EST (US and Canada) on April 11th, 2005.

• March 8, 2005 -- NIST has revised the Special Publication 800-73 Second DRAFT (SP 800-73) in response to the comments received on the January 31st public draft. The SP 800-73 provides the specifications for interfacing with the Personal Identity Verification (PIV) Card as specified in FIPS 201. SP 800-73 provides a streamlined, ISO compliant unified card edge independent of the underlying card platform technology. Please submit your comments using the comment template form provided on the website. Comments should be submitted to DraftFips201@nist.gov with "Comments on Public Draft SP 800-73" in the subject line. It is requested that Federal organizations submit one consolidated/coordinated set of comments. The comment period closes at 5:00 EST (US and Canada) on March 22nd, 2005.
   
• March 3, 2005 -- Frequently Asked Questions About the Standard for Personal Identity Verification (PIV) of Federal Employees and Contractors
   
• February 25, 2005 -- FIPS 201, Personal Identity Verification (PIV) of Federal Employees and Contractors, developed in response to Homeland Security Presidential Directive #12, is now available. Details about the development of the new standard can be found on the NIST’s PIV webpages.
   
• January 24, 2005 - Based on the comments received on November 8th draft of FIPS 201, NIST has decided to move technical requirements for biometric data to a Special Publication 800-76, Biometric Data Specification for Personal Identity Verification (.pdf). NIST is pleased to announce the draft of SP 800-76 for the public comments. The comment period for this draft is two weeks, ending on February 7th, 2005. Please direct all comments and questions to DraftFIPS201@nist.gov.
   
• This session is now full and no longer accepting registration.
  January 6, 2004 ­ A second session has been formed, from 1:00-4pm. Due to the number of responses from individuals interested in attending this meeting, there will a second meeting in the afternoon at the same location. The afternoon session will cover the same topics. Because of space limitations, attendees may only attend one session. Attendees registered for the morning session, may not switch sessions. If you are on the waiting list, you will receive email confirmation; there is no need to contact NIST.
   
• January 4, 2005 -- Update: NIST has received over 1900 comments from over 80 individuals and organizations during the public comment period on the draft standard. We are now working through the comments to finalize the standard for approval. As is our normal procedure for FIPS, we will be posting the comments we recevied to our web site (hopefully by the end of the month.) NIST appreciates the time and energy of those who reviewed the draft and provided us with many helpful comments and suggestions.
   
• The morning meeting has reached capacity and is now full. All people registering now will be put on a waiting list.
  December 22, 2004 -- On January 19, 2005, from 8:30-noon, the General Services Administration, in partnership with the Department of Commerce and the Office of Management and Budge will hold a public meeting. The meeting will cover the policy, privacy, and security issues associated with the Personal Identity Verification (PIV) Standard for Federal Employees and Contractors. Karen Evans, Administrator for E-Government and Information Technology is the keynote speaker. Ms. Evans will be followed by 2 panels to discuss key policy questions. For details click here.
  
  
• December 8, 2004 -- FIPS 201/SP 800-73 Update: NIST held a FIPS 201 public industry briefing on November 18, 2004. The briefing provided an opportunity for an exchange of information among key government and industry representatives regarding FIPS 201 implementation requirements and capabilities. Many inputs were provided to NIST regarding implementation realities and the continuing requirement to meet HSPD 12 time lines. In answer to many questions, NIST's intent in the FIPS 201 companion document, Special Publication 800-73, is to provide a technology neutral approach to support all card types. Some readers have commented that the language in the draft Special Publication 800-73 is not clear on this point. NIST intends to make some changes to Special Publication 800-73. The Interagency Advisory Board (IAB) has subsequently agreed to make specific suggested changes for the revision through its Technical Working Group. NIST has provided a terms of reference document to the IAB. The IAB has agreed to provide its recommended revisions to NIST on Special Publication 800-73 by January 20, 2005. Given the different procedures for FIPS and Special Publication processing, this will afford more development and review time for Special Publication 800-73 than for FIPS 201 within the HSPD #12-prescribed schedule. NIST plans a brief second public review of the revised Special Publication 800-73 in late January, 2005. Comments on FIPS 201 are still due on December 23, 2004. Slides from the November 18 industry briefing are available at http://csrc.nist.rip/piv-project/workshop-Nov18-2004/presentations.html.
   
• November 8, 2004 -- NIST is pleased to announce the first public drafts of Federal Information Processing Standard 201 (FIPS 201), Personal Identity Verification for Federal Employees and Contractors, and Special Publication 800-73 (SP 800-73), Integrated Circuit Card for Personal Identity Verification. These publications are being published in response to Homeland Security Presidential Directive #12 of August 27, 2004. The comment periods for FIPS 201 and SP 800-73 public drafts will be 45 days, ending on December 23rd, 2004. Please direct all comments and questions to DraftFips201@nist.gov. To view/download these two drafts, the README file and comment file.