WinMagic has been awarded various certifications for its encryption software, SecureDoc. This includes NIST Certificate #1. These companies are continually developing and applying new standards and measures for technology.

Below you will find links to Research Papers and Special Reports from NIST:

Research papers:

Annex A: Approved Security Functions - FIPS PUB 140-2 (June 2009)

The purpose of this document is to provide a list of the Approved security functions applicable to FIPS PUB 140-2.

The purpose of this document is to provide a list of the Approved protection profiles applicable to FIPS PUB 140-2.

The purpose of this document is to provide a list of the Approved key establishment techniques applicable to FIPS PUB 140-2.

This standard specifies the Rijndael algorithm ([3] and [4]), a symmetric block cipher that can process data blocks of 128 bits, using cipher keys with lengths of 128, 192, and 256 bits.

This standard specifies the security requirements for a cryptographic module utilized within a security system protecting sensitive information in computer and telecommunication systems.

This standard specifies the Rijndael algorithm ([3] and [4]), a symmetric block cipher that can process data blocks of 128 bits, using cipher keys with lengths of 128, 192, and 256 bits.

This standard specifies the architecture and technical requirements for a common identification standard for Federal employees and contractors.

This standard defines a reliable, government-wide PIV system for use in applications such as access to Federally controlled facilities and information systems.

This standard specifies five hash algorithms that can be used to generate digests of messages. The digests are used to detect whether messages have been changed since the digests were generated.

This publication provides a standard to be used by Federal organizations when these organizations specify that cryptographic-based security systems are to be used to provide protection for sensitive or valuable data.

This standard specifies the security requirements that will be satisfied by a cryptographic module. The standard provides four increasing, qualitative levels of security intended to cover a wide range of potential applications and environments.

>> READ MORE

Special Reports:

A Comparison of the Security Requirements for Cryptographic Modules in FIPS 140-1 AND FIPS 140-2 (June 2001)

FIPS 140-1&2 define a framework and methodology for NIST's current and future cryptographic standards.

This publication provides recommendations for password management, which is the process of defining, implementing, and maintaining password policies throughout an enterprise. Effective password management reduces the risk of compromise of password-based authentication systems.

As different wireless technologies are launched to enable user mobility and provide pervasive network and service accessibility, security has been a prominent requirement for U.S. Federal Government in such access environments. Access authentication and the establishment of keys that protect wireless traffic are both core security components in wireless applications.

The purpose of this document is to assist organizations in mitigating the risks associated with the enterprise technologies used for telework, including remote access servers, telework client devices, and remote access communications. The document emphasizes the importance of securing sensitive information stored on telework devices and transmitted through remote access across external networks.

This guide will assist organizations and system owners in making practical sanitization decisions based on the level of confidentiality of their information.

This publication was developed to assist agency decision-makers in determining if a PKI is appropriate for their agency, and how PKI services can be deployed most effectively within a Federal agency. It is intended to provide an overview of PKI functions and their applications.

This Recommendation provides cryptographic key management guidance. It consists of three parts. Part 1 provides general guidance and best practices for the management of cryptographic keying material. Part 2 provides guidance on policy and security planning requirements for U.S. government agencies. Finally, Part 3 provides guidance when using the cryptographic features of current systems.

This Recommendation specifies techniques for the generation of random bits that may then be used directly or converted to random numbers when random values are required by applications using cryptography.

This publication discusses the different PIV Card capabilities so that the risk-based assessment can be aligned with the appropriate PIV authentication mechanism. It also introduces the concept of “Controlled, Limited, Exclusion” areas to employ risk-based PIV authentication mechanisms for different areas within a facility.

This publication provides recommendations for securing external devices used for telework and remote access. Many organizations limit the types of external devices that can be used for remote access and which resources they can use, such as permitting teleworker-owned laptops to access a limited set of resources and permitting all other external devices to access Web-based email only.

>> READ MORE

Permalink

Research Papers & Special Reports

Research papers:

Special Reports: