This article was accepted into the corpus but its outbound wikilinks were never NER-processed — typical at the deepest BFS hop or when the run's entity cap was reached. No expansion funnel to show.
| NIST SP 800-132 | |
|---|---|
| Title | NIST Special Publication 800-132 |
| Author | National Institute of Standards and Technology |
| Released | 2010 |
| Series | Special Publication 800 |
| Subject | Key derivation functions, cryptography |
| Language | English |
NIST SP 800-132 is a Special Publication issued by the National Institute of Standards and Technology that specifies recommendations for generating cryptographic keys from passwords and other low-entropy sources. It provides a framework for key derivation using pseudorandom functions and offers practical guidance for implementers in federal agencies such as the Department of Defense, National Security Agency, Federal Bureau of Investigation, Central Intelligence Agency, and Department of Homeland Security. The guidance aligns with other standards and practices used by institutions like the International Organization for Standardization, the Internet Engineering Task Force, and the European Union Agency for Cybersecurity.
NIST SP 800-132 presents requirements and recommendations for Password-Based Key Derivation Functions (PBKDFs) and constructions using keyed pseudorandom functions drawn from approved algorithms such as Advanced Encryption Standard, SHA-1, SHA-256, and HMAC. The document situates its guidance among related works including FIPS 140-2, FIPS 197, SP 800-57, SP 800-38A, and the Cryptographic Module Validation Program, while referencing implementations used in products from vendors like Microsoft, Oracle Corporation, IBM, Intel Corporation, and Cisco Systems. It targets a range of stakeholders including operators of systems for Internal Revenue Service, Social Security Administration, Centers for Medicare & Medicaid Services, and contractors supporting Department of Energy facilities.
The purpose of the publication is to provide standardized mechanisms for deriving symmetric keys from passwords, passphrases, or other human-memorable secrets for use in protocols deployed by organizations such as Department of Transportation, Federal Aviation Administration, National Aeronautics and Space Administration, United States Postal Service, and Library of Congress. It defines acceptable parameter choices, entropy considerations, and security objectives relevant to deployments in contexts handled by agencies like Federal Communications Commission and institutions such as Harvard University, Massachusetts Institute of Technology, Stanford University, and Carnegie Mellon University. The scope excludes high-assurance key establishment methods covered by standards referenced by bodies like the Defense Information Systems Agency and Office of Management and Budget.
The document prescribes use of pseudorandom functions, salts, iteration counts, and output keying material with explicit ties to standards including PKCS #5, ISO/IEC 18033, IEEE 802.11, TLS (protocol), and IPsec. It recommends HMAC-based constructions using approved hash functions from families like SHA-2 and encourages selection of iteration counts informed by advice from organizations such as CERT Coordination Center, Open Web Application Security Project, SANS Institute, and Center for Internet Security. Guidance references cryptanalytic advances reported by groups including researchers from Cryptography Research, Inc., RSA Laboratories, Google, Mozilla Foundation, EFF, and academic teams at University of California, Berkeley, Princeton University, and ETH Zurich.
Implementers are advised to consider interoperability with products and libraries provided by OpenSSL, LibreSSL, GnuTLS, Bouncy Castle, Microsoft .NET Framework, Java Cryptography Architecture, and operating systems from Apple Inc., Red Hat, Canonical (company), Microsoft Windows, and FreeBSD. The publication addresses storage of salts and derived keys in repositories managed by services like Amazon Web Services, Google Cloud Platform, Microsoft Azure, Dropbox, and Box (company), as well as integration with identity systems such as Lightweight Directory Access Protocol, Active Directory, SAML, and OAuth. It cautions implementers to heed performance trade-offs that affect deployments in platforms from ARM Holdings, NVIDIA, Broadcom, and Qualcomm.
The guidance evaluates threats including offline brute-force attacks, rainbow table attacks, and side-channel leakage examined by researchers at NCC Group, Mandiant, Kaspersky Lab, Symantec, and FireEye. It recommends parameter tuning to mitigate advances in parallel hardware such as Graphics Processing Unit, Field-programmable gate array, and Application-specific integrated circuit platforms developed by firms like AMD, NVIDIA Corporation, and Xilinx. The publication aligns recommended practices with cryptanalytic findings published in venues like CRYPTO (conference), EUROCRYPT, USENIX Security Symposium, ACM CCS, and IEEE Symposium on Security and Privacy.
NIST SP 800-132 is cited in compliance programs and procurement requirements across agencies including General Services Administration, Department of Labor, Department of Education, and Veterans Affairs. Common use cases include secure key generation for disk encryption systems such as BitLocker, FileVault, and LUKS, enterprise single sign-on solutions used by SAP SE, Salesforce, and Workday, as well as secure messaging and storage services like Signal (software), WhatsApp, and Telegram Messenger LLC. It supports regulatory frameworks and audits conducted by entities such as the Government Accountability Office, Office of Inspector General, and standards bodies like National Institute of Standards and Technology's own compliance programs.
Released in 2010, the publication followed earlier NIST work and harmonized with international efforts by organizations such as International Telecommunication Union, European Telecommunications Standards Institute, and the Internet Architecture Board. Subsequent community analyses and updates in related NIST publications—coordinated with feedback from stakeholders including IEEE Standards Association, IETF Working Group, OWASP, and vendors like Apple Inc. and Google LLC—have influenced practice though the base document remains a seminal reference for password-based key derivation. The evolution reflects academic contributions from institutions such as University of Cambridge, University of Oxford, Yale University, and Columbia University and cryptanalytic reports from consortia like ENISA.
Category:Cryptography standards