Donna 

Deputy Chief Cybersecu

Information Technology 

National Institute of Standards and T

Octobe
` ... is to promote U.S. innovation 

industrial competitiveness by advmeasurement science, standardstechnology through research and development in information techmathematics, and statistics.

2
` While Standards has always been in our 

has always been an integral part of our 

◦ Research advances science.◦ Research informs our standards and metrics d

activities.

◦ Research establishes new technologies, creati

3
4

` Authorization` Biometrics` Cryptography` Forensics` Identification & 

Authentication

` Key Management` Network Security ` Product 

Assurance

` Security Metrics

` Security Automatio` Security for Emerg` Security for Sector

Applications

` Trustworthy Softw` Usability
` Technical Leadership in Standards Devel

Organizations

◦ ANSI INCITS, ISO, ITU-T, IETF, IEEE ◦ Sector-specific organizations: HL7, IHE, ATA, B

W3C

` NIST Federal Information Processing Stan` Security Guidelines and Best Practices

◦ NIST Special Publications and Interagency Repo

5
6
` Data Encryption Standard (DES)–

The Pioneer

◦ FIPS 46, Data Encryption Standard 

was the first unclassified, publicly disclosed algorithm standard for the protection of U.S. government sensitive, unclassified information 

◦ Adopted by ANSI, ISO/IEC (TDEA)◦ World’s most widely used encryption 

algorithm, particularly to protect financial information, for 25 years

` Related Research

◦ Generated open research and 

development in cryptanalysis (esp. block ciphers), cryptographic testing, and key management

7
8
` Advanced Encryption Standard (AES)

◦ NIST, through an open and transparent process, 

International Cryptographic Algorithm Design Co

◦ Innovative design criteria included support for va

architectures, software, and smart cards

◦ Fifteen submitted designs; investigations and an

cryptographers at NIST and around the world

◦ NIST selected Rijndael and specified the algorithm 

Advanced Encryption Standard

◦ Adopted by standards bodies and the IT vendor c

announced use of AES to protect national securit

` Related Research

◦ Generated new research in cryptanalysis, smarte

hardware designs

9
10

Examples from the cycles of research and stcryptographic algorithms
` Secure Hash Algorithm 3 (SHA-3) – 

◦ Cryptanalytic attacks on several cryptogr

algorithms 

◦ Cryptographic community encouraged N

a Cryptographic Hash Competition

◦ Design criteria that advance the 

state of the art: performance; drop-in compatibility; and security

◦ Over 60 entries submitted from 

around the world

◦ NIST recently selected 14 to 

advance to round 2 

11
` Publication of NIST standards for cryp

algorithms creates research opportun

◦ PKI and Symmetric Key Management◦ Smart Cards◦ Cryptographic Testing◦ Cryptographic Analysis

` This research has advanced science a

to new or emerging standards, such a

◦ Enhanced block ciphers (AES)◦ Faster and more secure hash algorithms (S◦ Identity management (Personal Identity Ve

` These standards have spawned new r

avenues, so the cycle continues...

12
` NIST has succeeded 

if research

◦ Moves the state of the 

art forward

◦ Leads to more precise 

metrics or more costeffective testing and validation; or

◦ Most importantly, contributes 

to development of successful new s

13
` NIST has succeeded if products 

that conform to a standard are

◦ Widely available & adopted◦ Interoperable◦ Satisfy customer requirements

x Functionalityx Performancex ROI

14
15