FIPS Changes and Announcements

Updated 10/22/15

With the passage of the Federal Information Security Management Act (FISMA) of 2002, there 

is no longer a statutory provision to allow for agencies to waive mandatory Federal Information 

Processing Standards (FIPS). The waiver provision had been included in the Computer Security 

Act of 1987; however, FISMA supersedes that Act. Therefore, the references to the "waiver 

process" contained in many of the FIPS listed below are no longer operative. Note, however, that 

not all FIPS are mandatory; consult the applicability section of each FIPS for details. FIPS do not 

apply to national security systems (as defined in FISMA). Go to: http://www.gpoaccess.gov/fr/

for the actual federal register notice and search by date.

Federal Register notice dated October 20, 2015, the National Institute of Standards and 

Technology (NIST) requests comments on Federal Information Processing Standard (FIPS) 186-

4, Digital Signature Standard, which has been in effect since July 2013. 

Federal Register notice dated October 19, 2015, Announcing the Withdrawal of Six (6) Federal 

Information Processing Standards (FIPS).

Federal Register notice dated August 5, 2015, Announcing Approval of Federal Information 

Processing Standard (FIPS) 202, SHA-3 Standard: Permutation-Based Hash and ExtendableOutput Functions, and Revision of the Applicability Clause of FIPS 180-4, Secure Hash 

Standard.

Federal Register notice dated January 16, 2015, Announcing Proposed Withdrawal of Six FIPS.

Federal Register notice dated May 28, 2014, Announcing Draft Federal Information Processing 

Standard (FIPS) 202, SHA-3 Standard: Permutation-Based Hash and Extendable-Output 

Functions, and Draft Revision of the Applicability Clause of FIPS 180-4, Secure Hash Standard, 

and Request for Comments.

Federal Register notice dated September 5, 2013, Announced the Approval of Federal 

Information Processing Standard (FIPS) Publication 201-2, the Standard for Personal Identity 

Verification of Federal Employees and Contractors. 

Federal Register notice dated July 19, 2013, Announced the Approval of Federal Information 

Processing Standard (FIPS) Publication 186-4, Digital Signature Standard.

Federal Register notice dated August 30, 2012, Announcing Revised Draft Federal Information 
Processing Standard (FIPS) 140-3 (Second Draft), Security Requirements for Cryptographic 

Modules; Request for Additional Comments.

Federal Register notice dated July 9, 2012, Announcing Revised Draft Federal Information 

Processing Standard (FIPS) 201-2, Personal Identity Verification (PIV) of Federal Employees 

and Contractors, Request for Comments, and Public Workshop on Revised Draft FIPS 201-2.

Federal Register notice dated April 10, 2012, Announced the Draft Revisions to Federal 

Information Processing Standard (FIPS) 186-3, Digital Signature Standard (DSS), and Request 

for Comments.

Federal Register notice dated March 6, 2012, Announced the Approval of Federal Information 

Processing Standard (FIPS) Publication 180-4, Secure Hash Standard (SHS); a Revision of FIPS 

180-3.

Federal Register notice dated March 8, 2011, Announcing Draft Federal Information Processing 

Standard (FIPS) 201-2, Personal Identity Verification of Federal Employees and Contractors 

Standard, Request for Comments

Federal Register notice dated February 11, 2011, Announcing Draft Federal Information 

Processing Standard (FIPS) 180-4, Secure Hash Standard, and Request for Comments

Federal Register notice dated December 11, 2009, Announcing Revised Draft Federal 

Information Processing Standard (FIPS) 140–3, Security Requirements for Cryptographic 

Modules

Federal Register notice dated June 9, 2009, Announced Approval of Federal Information 

Processing Standard (FIPS) Publication 186–3, Digital Signature Standard (DSS)

Federal Register notice dated October 17, 2008, Announced Approval of Federal Information 

Processing Standard (FIPS) Publication 180–3, Secure Hash Standard, a Revision of FIPS 180–

2, Secure Hash Standard

Federal Register notice dated September 2, 2008 on the Approval of Withdrawal of 10 FIPS 

PUBS.

Federal Register notice dated July 29, 2008, announced Approval of Federal Information 

Processing Standard (FIPS) Publication 198-1, The Keyed-Hash Message Authentication Code 

(HMAC), a Revision of FIPS 198

Federal Register notice dated November 2, 2007, announced Request for Candidate Algorithm 

Nominations for a New Cryptographic Hash Algorithm

Federal Register notice dated July 13, 2007, announced Draft of Federal Information Processing 

Standard (FIPS) Publication 140-3, Security requirements for Cryptographic Modules
Federal Register notice dated June 12, 2007, announced Draft of Federal Information Processing 

Standard (FIPS) Publication 198-1, the Keyed-Hash Message Authentication Code

Federal Register notice dated June 12, 2007, announced Draft of Federal Information Processing 

Standard (FIPS) Publication 180-3, the Secure Hash Standard

Federal Register notice dated January 23, 2007, announcing The Development of New Hash 

Algorithm(s) for the Revision of Federal Information Processing Standard (FIPS) 180–2, Secure 

Hash Standard

Federal Register notice dated March 31, 2006, announcing Approval of Federal Information 

Processing Standard (FIPS) Publication 201-1, Standard for Personal Identity Verification of 

Federal Employees and Contractors

Federal Register notice dated March 31, 2006, announcing Approval of Federal Information 

Processing Standard (FIPS) 200, Minimum Security Requirements for Federal Information and 

Information Systems 

Federal Register notice dated March 13, 2006 announced Draft Federal Information Processing 

Standard (FIPS) 186-3, Digital Signature Standard (DSS)

Federal Register notice dated September 8, 2005 on Review of Proposed Changes to FIPS 201, 

Standard for Personal Identity Verification of Federal Employees and Contractors. 

Federal Register notice dated July 15, 2005 on Proposed Draft Federal Information Processing 

Standard (FIPS) Publication 200, Minimum Security Requirements for Federal Information and 

Information Systems

Federal Register notice dated July 15, 2005 on the Proposed Withdrawal of Ten (10) Federal 

Information Processing Standards (FIPS)

Federal Register notice dated May 19, 2005 on the Approval of Withdrawal of FIPS 46-3, DES, 

and two associated FIPS.

Federal Register notice dated April 8, 2005, announced FIPS 201, Standard for Personal Identity 

Verification of Federal Employees and Contractors.

Federal Register notice dated February 8, 2005 on the Approval of Withdrawal of 17 FIPS 

PUBS.

Federal Register notice dated January 12, 2005, announced development of FIPS 140-3, 

Security Requirements for Cryptographic Modules. 

Federal Register notice dated July 26, 2004 on the Proposed Withdrawal of FIPS 46-3 Data 

Encryption Standard.
Federal Register notice dated February 10, 2004, announced FIPS 199, Standards for Security 

Categorization of Federal Information and Information Systems. 

Federal Register notice dated March 4, 2003 on the Proposed Withdrawal of 17 FIPS PUBS.

Change Notice 7 to FIPS 6-4, Counties and Equivalent Entities of the U.S., Its Possessions, and 

Associated Areas.

Change Notice 6 to FIPS 6-4, Counties and Equivalent Entities of the U.S., Its Possessions, and 

Associated Areas. 

Change Notices 4 and 5 to FIPS 6-4, Counties and Equivalent Entities of the U.S., Its 

Possessions, and Associated Areas. 

Federal Register Change Notice #2 dated, November 15, 1998, FIPS PUB 4-2, Representation 

of Calendar Date for Information Interchange. 

This change notice provides editorial changes, updated references to documents and 

organizations and other minor changes to FIPS PUB 4-1. These changes have been incorporated 

into a corrected version of the standard, which shall be titled FIPS PUB 4-2, Representation of 

Calendar Date for Information Interchange. This updated version of the standard for representing 

calendar date implements the Federal Government’s commitment to use four-digit year elements 

(e.g., 1999, 2000, etc.) in its information technology systems.

FIPS PUB 4-2 supersedes FIPS PUB 4-1, dated January 27, 1988, and Change Notice 1, dated 

March 25, 1996. 

Federal Register notice dated February 25, 2000 on the Approval of Withdrawal of 33 FIPS 

PUBS.

Federal Register notice dated January 15, 1999 on Proposed Federal Information Processing 

Standard (FIPS) 46-3, Data Encryption Standard (DES)

Federal Register notice dated December 15, 1998 on Approval of Interim Final Federal 

Information Processing Standard 186-1, Digital Signature Standard.

Federal Register notice dated November 18, 1998 on the Approval of Withdrawal of 16 FIPS 

PUBS.

Federal Register notice dated November 13, 1998 on the Proposed Withdrawal of 31 FIPS 

PUBS. 

Federal Register notice dated May 7, 1998 on the Notice of Termination of Validation Services 

for FIPS PUBS. 

Federal Register notice dated July 29, 1997, on the Approval of Withdrawal of 33 FIPS PUBS.
Federal Register notice dated April 15, 1997 on the Change: 1 for FIPS Waivers 

Federal Register notice dated April 8, 1997 on the Termination of Validation Services for FIPS 

PUBS.