Sharing Notice: White
The National Cryptographic Standards
1.3 Structure of the Document
The rest of this document is organized as follows. Section 2 lists the accepted symmetric
and asymmetric primitives with their key, block and initialization vector sizes. Section 3
provides the accepted symmetric and asymmetric schemes: block cipher modes of
operation, MAC, AEAD, key wrap functions, key derivation functions, key agreement, key
transport, hybrid encryption and public key signatures. Section 4 provides requirements
for the most prevalent application protocols such as DNS Security (DNSSEC), IP Security
(IPsec), Bluetooth, SSH, TLS, UMTS/LTE/5G, WPA and Kerberos. Section 5 provides a
list of the accepted algorithms for certificates and the validity of the certificates. Section
6 provides the requirements for the different steps of the key lifecycle to ensure that keys
are managed properly from the moment they are created until their destruction, and their
usage is standardized across processes. Finally, Section 7 provides appendices that present
some information about Pseudo Random Number Generation (PRNG), Post-Quantum
Cryptography, Side-Channel Attacks, Definitions and Acronyms.
10
Document Classification: Open
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents