ABSTRACT

The National Institute for Standards and Technology (NIST) was founded in 1901 and is now part of the US Department of Commerce. NIST is one of the oldest physical science laboratories in the United States. In addition, the NIST Computer Security Division (CSD) within Information Technology Laboratory (ITL) leads the efforts in risk management, identity management, key management, security automation, mobile security, trusted roots for hardware, vulnerability management, and cryptography. The Commission solicited input from the public through workshops and ongoing outreach and NIST took input from the Commission on Enhancing National Cybersecurity. Frankly, the existing programs in NIST were already significantly addressing the issues discussed by the commission. NIST documented and solicited public comment on the principles and rigorous processes NIST uses to engage stakeholders and experts in industry, academia, and government to develop and revise these standards. The final report is now published and serves as a basis for all CSD's cryptographic development efforts.