This site displays a prototype of a “Web 2.0” version of the daily Federal Register. It is not an official legal edition of the Federal Register, and does not replace the official print version or the official electronic version on GPO’s govinfo.gov.
The documents posted on this site are XML renditions of published Federal Register documents. Each document posted on the site includes a link to the corresponding official PDF file on govinfo.gov. This prototype edition of the daily Federal Register on FederalRegister.gov will remain an unofficial informational resource until the Administrative Committee of the Federal Register (ACFR) issues a regulation granting it official legal status. For complete information about, and access to, our official publications and services, go to About the Federal Register on NARA's archives.gov.
The OFR/GPO partnership is committed to presenting accurate and reliable regulatory information on FederalRegister.gov with the objective of establishing the XML-based Federal Register as an ACFR-sanctioned publication in the future. While every effort has been made to ensure that the material on FederalRegister.gov is accurately displayed, consistent with the official SGML-based PDF version on govinfo.gov, those relying on it for legal research should verify their results against an official edition of the Federal Register. Until the ACFR grants it official status, the XML rendition of the daily Federal Register on FederalRegister.gov does not provide legal notice to the public or judicial notice to the courts.
National Institute of Standards and Technology (NIST), Commerce Department.
Notice.
This notice announces the Secretary of Commerce's approval of Federal Information Processing Standard (FIPS) Publication 180-4, Secure Hash Standard (SHS). FIPS 180-4 updates FIPS 180-3 by providing a general procedure for creating an initialization value, adding two additional secure hash algorithms to the Standard: SHA-512/224 and SHA-512/256 and removing a restriction that padding must be done before hash computation begins, which was required in FIPS 180-3.
The approved Standard is effective as of March 6, 2012.
Elaine Barker, (301) 975-2911, National Institute of Standards and Technology, 100 Bureau Drive, Mail Stop 8930, Gaithersburg, MD 20899-8930, email: elaine.barker@nist.gov, or Quynh Dang, (301) 975-3610, email: quynh.dang@nist.gov.
This notice announces the Secretary of Commerce's approval of Federal Information Processing Standard (FIPS) Publication 180-4, Secure Hash Standard (SHS). FIPS 180-4 updates FIPS 180-3 by providing a general procedure for creating an initialization value, adding two additional secure hash algorithms to the Standard: SHA-512/224 and SHA-512/256, and removing a restriction that padding must be done before hash computation begins, which was required in FIPS 180-3. SHA-512/224 and SHA-512/256 may be more efficient alternatives to SHA-224 and SHA-256 respectively, on platforms that are optimized for 64-bit operations. Removing the restriction on the padding operation in the secure hash algorithms will potentially allow more flexibility and efficiency in implementing the secure hash algorithms in many computer network applications.
On February 11, 2011, NIST published a notice in the Federal Register (76 FR 7817) announcing the availability of draft FIPS 180-4, and soliciting comments on the draft standard from the public, research communities, manufacturers, voluntary standards organizations and Federal, State and local government organizations. Comments were received from two corporations and one individual. The following is a summary of the specific comments and NIST's responses to them:
Comment: One commenter requested NIST to provide more detail for the calculation of the initialization values for SHA-512/224 and SHA-512/256, especially for the variable t.
Response: Clarification of the variable “t” has been provided in the FIPS. Sufficient examples are provided at the Web site: http://csrc.nist.gov/groups/ST/toolkit/examples.html, as indicated in the APPENDIX A of the FIPS.
Comment: One commenter indicated that the notation for SHA-512 (“SHA-512/t”) and SHA-512 (“SHA-512/256”) needs to be further defined, including a definition for ASCII strings.
Response: Clarification of the variable “t” was provided in Section 5.3.6 of the FIPS, along with further clarification of the input string to the SHA-512 hash function.
Comment: One commenter requested NIST to define SHA-512/160 as an approved hash algorithm.
Response: NIST believes that there is not much demand for a new SHA-512-based hash algorithm with 160-bit hash output at this time, since generating digital signatures using 160-bit hash values will be not approved after the year 2013.
FIPS 180-4 is available electronically from the NIST Web site at: http://csrc.nist.gov/publications/PubsFIPS.html.
Dated: March 1, 2012.
Willie E. May,
Associate Director for Laboratory Programs.
[FR Doc. 2012-5400 Filed 3-5-12; 8:45 am]
BILLING CODE 3510-13-P
