Transitioning the Use of Cryptographic Algorithms and Key Lengths

Barker, Elaine; Roginsky, Allen

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

NIST SP 800-131A Rev. 2 (Initial Public Draft)

Obsoleted on March 21, 2019 by SP 800-131A Rev. 2

Transitioning the Use of Cryptographic Algorithms and Key Lengths

Documentation Topics

Date Published: July 2018
Comments Due: September 7, 2018 (public comment period is CLOSED)
Email Questions to: CryptoTransitions@nist.gov

Author(s)

Elaine Barker (NIST), Allen Roginsky (NIST)

Announcement

NIST is updating its guidance for transitioning to the use of stronger cryptographic keys and more robust algorithms by federal agencies to protect sensitive, but unclassified, information. These transitions are meant to address the challenges posed by new cryptanalysis, the increasing power of classical computing technology, and the potential emergence of quantum computers.

Draft Special Publication (SP) 800-131A Revision 2, Transitioning the Use of Cryptographic Algorithms and Key Lengths, is now available for public comment. This revision includes a strategy and schedule for retiring the use of the Triple Data Encryption Algorithm (TDEA). Other proposed changes are listed in Appendix B.

Abstract

The National Institute of Standards and Technology (NIST) provides cryptographic key management guidance for defining and implementing appropriate key management procedures, using algorithms that adequately protect sensitive information, and planning ahead for possible changes in the use of cryptography because of algorithm breaks or the availability of more powerful computing techniques. NIST Special Publication (SP) 800-57, Part 1 includes a general approach for transitioning from one algorithm or key length to another. This Recommendation (SP 800-131A) provides more specific guidance for transitions to the use of stronger cryptographic keys and more robust algorithms.

Keywords

cryptographic algorithm; digital signatures; encryption; hash function; key agreement; key derivation functions; key management; key transport; key wrapping; message authentication codes; post-quantum algorithms; random number generation; security strength; transition

Control Families

System and Communications Protection; System and Information Integrity

Documentation

Publication:
Draft SP 800-131A Rev. 2 (pdf)

Supplemental Material:
Comments received (pdf)

Related NIST Publications:
SP 800-57 Part 1 Rev. 4

Document History:
07/19/18: SP 800-131A Rev. 2 (Draft)
03/21/19: SP 800-131A Rev. 2 (Final)

Topics

Security and Privacy

cryptography