NIST PIV and digital identity SP 800-78-4 → SP 800-78-5

Appendix B Change Log: This appendix is informative and provides an overview of the changes made to SP 800-78 since its initial release. In August 2007, Revision 1 enhanced alignment with the National Security Agency’s Suite B Cryptography by: • Reducing the set of elliptic curves approved for use with PIV cards from six curves to two, • Adding SHA-384 with Curve P-384, and • Eliminating the largest size of RSA keys (3072 bits) on PIV cards. In February 2010, Revision 2 updates included: • Realigning with the NSA Suite B Cryptographic specification by removing discontinued Elliptic Curve MQV as a key agreement scheme, • Aligning with FIPS 186-3 by removing RSA 4096 as an algorithm and key size for generating signatures for PIV data objects, and • Eliminating the redundant cipher block chaining (CBC) mode of encryption for symmetric authentication purposes (challenge and response) In December 2010, Revision 3 updates included: • Aligning the set of acceptable RSA public key exponents with FIPS 186-3 and • Extending the permitted use of SHA-1 after December 31, 2010, when signing revocation information under limited circumstances. In 2014, Revision 4 updates included: • Adding algorithm and key size requirements for secure messaging, • Adding Cryptographic Algorithm Validation Program (CAVP) validation testing requirements, and • Clarifying that RSA public keys may only have a public exponent of 65537. In 2024, Revision 5 updates incorporated the following changes: • Table 1 reflects additional higher strength keys with at least 128-bit security and suggested sunsets of lower sized keys by 2030 in anticipation of the recommended migration to 128-bit security strength in 2031, • Accommodation of the Secure Messaging Authentication key, • Deprecation of the symmetric card authentication key, • Deprecation of 3TDEA algorithm with identifiers ‘00’ and ‘03’, • Removal of the retired RNG from CAVP PIV component testing, where applicable, and • Removal of the retired FIPS 186-2 Key Generation component testing, where applicable.