3.13 Assertion Protection
NIST PIV and digital identity SP 800-63C-4 against SP 800-63C
All changes in this version
All changes in this version
Title changed
Before · SP 800-63C
After · SP 800-63C-4
Assertion Protection
Control changed
Before · SP 800-63C
After · SP 800-63C-4
Assertions SHALL include a set of protections to prevent attackers from manufacturing valid assertions or reusing captured assertions at different RPs. The required protections depend on the details of the use case being considered, and specific protections are listed in the following subsections.