Cryptographic Standards Referencia
Referencia para FIPS, NIST, ISO, y IETF cryptographic standards y sus relationships.
Standards Bodies
NIST (FIPS) publishes US federal standards: FIPS 197 (AES), FIPS 180 (SHA), FIPS 198 (HMAC), FIPS 186 (DSA). ISO/IEC publishes international standards: 18033 (encryption), 10118 (hashing), 9797 (MAC). IETF publishes RFCs for protocol-level standards: TLS, IPsec, JWT. ANSI X9 publishes financial industry standards. SECG publishes elliptic curve standards (SEC 1, SEC 2). IEEE P1363 covers public-key cryptography. CRYPTREC and NESSIE provide national/regional evaluations.
- NIST/FIPS
- US federal
- ISO/IEC
- International
- IETF
- Protocol RFCs
AES, SHA, DSA18033, 10118TLS, JWTCompliance and Validation
FIPS 140-2/140-3 validates cryptographic module implementations (security levels 1-4). CAVP/ACVP validate algorithm implementations. Common Criteria (ISO 15408) evaluates product security. FIPS-approved algorithms are required for US federal systems. Compliance often requires specific modes (e.g., GCM not ECB), key sizes (min 112 bits, transitioning to 128+), and random sources (DRBG). The transition to post-quantum requires updating standards (NIST PQC). FIPS 140-3 is the current module validation standard.
- FIPS 140-3
- Module validation
- CAVP/ACVP
- Algorithm validation
- transition
- PQ algorithms
levels 1-4test vectorsNIST PQC