asteroza + nist   32

Privacy Framework | NIST
NIST working on a related analog of the Cybersecurity Framework, but for privacy
NIST  privacy  framework  risk  management  business  security 
november 2018 by asteroza
NIST Blockchain technology overview
NIST telling you why you don't need a blockchain, with a flowchart for easy reading
NIST  blockchain  humor  flowchart 
october 2018 by asteroza
Round 1 Submissions - Post-Quantum Cryptography | CSRC
Round 1 candidates for the new NIST post-quantum cryptographic algorithm contest
NIST  contest  post-quantum  post  quantum  encryption  cryptography  algorithm  research 
december 2017 by asteroza
cry/nbp: NIST Bad Passwords - JavaScript library for detecting common passwords.
password blacklist javascript library, though for additional blacklists, maybe use openwall dictionaries?
NIST  bad  password  blacklist  javascript  library  dictionary 
november 2017 by asteroza
NIST Randomness Beacon
DO NOT USE FOR SECRETS, but if you want something that provides a repeatable randomness, like a seeded OTP generator, it probably isn't terrible...
NIST  random  number  generator  beacon 
july 2017 by asteroza
Special Publication 800-63 | NIST
64 character passwords without required specials, no forced rotation without evidence of compromise, no SMS 2FA, password paste OK
NIST  800-63  digital  identity  service  requirements  password  policy  guidance  information  reference  security 
june 2017 by asteroza
DRAFT NIST Special Publication 800-63B
NIST now saying forced periodic password changes are stupid, and password max length is also stupid.
NIST  password  security  digital  authentication  government  guideline  reference  information  draft  Delicious 
july 2016 by asteroza
Biometric Web Services
Research into biometric authentication web services. I'm a little uncomfortable about this from number of perspectives, despite the value proposition. First and foremost, biometrics are not necessarily unqiue. Next, they can not be reset/revoked. Next, they can be used in unintended ways, which can rapidly grow beyond the control/reach of a user.
authentication  security  standard  protocol  project  biometrics  web  NIST  Delicious 
august 2012 by asteroza
National Strategy on Trusted Identities in Cyberspace
Your internet drivers license, courtesy of the Federal government and assorted big private players with lobbyists.
NSTIC  national  online  identity  credential  system  ID  internet  drivers  license  false  security  privacy  government  NIST  standard  policy  Delicious 
april 2011 by asteroza

related tags

800-63  additive  algorithm  algorithms  analysis  atomic  authenticated  authentication  bad  beacon  best  biometric  biometrics  blacklist  blockchain  book  business  candidate  CFTT  competition  computer  concrete  container  contest  credential  critical  cryptanalysis  cryptography  cybersecurity  data  Delicious  deposition  development  dictionary  digital  draft  drivers  ebook  education  emulation  encryption  engineering  erase  erasure  experiment  false  family  film  fingerprint  FIPS  FIPS-202  FIPS202  flowchart  forensics  framework  function  generator  government  guidance  guide  guideline  guidelines  guidline  handbook  hardening  hash  high  howto  humor  ICS  ID  identity  information  infrastructure  internet  interoperability  IoT  javascript  keccak  key  layer  learning  length  library  license  Linux  list  listing  mac  management  manufacturing  materials  math  mathematics  media  method  minutiae  modeling  national  network  NIST  NSTIC  NTP  number  online  OS  OSX  password  PIV  plating  platinum  policy  post  post-quantum  practices  preshared  privacy  private  process  production  programming  project  protection  protocol  quantum  random  recognition  recommendations  recovery  reference  regulations  requirements  research  resource  risk  RNG  rules  salt  sanitizing  SCADA  science  secure  security  SEMATECH  service  SHA-3  SHA3  simulation  single  skein  software  specialist  specification  sponge  standard  standards  statistical  statistics  structure  structures  surface  system  technology  template  testing  thin  tips  tool  tools  treatment  tutorial  utilities  visualization  voltage  web 

Copy this bookmark: