3.1.3 Allowable Authenticator Types
NIST PIV and digital identity SP 800-157 Rev. 1 (Draft)
All changes in this version
All changes in this version
Title
Allowable Authenticator Types
Control
A multi-factor cryptographic authenticator as specified in [SP800-63B] Sec. 3.1.7.1 SHALL be used for PKI-based derived PIV authentication. The authenticator SHALL be phishing- resistant, as described in [SP800-63B] Sec. 3.2.5. Authenticators used at AAL3 SHALL meet the additional requirements described in [SP800-63B] Sec. 2.3.