National Institute of Standards and Technology – Federal Register Recent Federal Regulation Documents

The National Institute of Standards and Technology (NIST) launched a public competition in November 2007 to develop a new cryptographic hash algorithm for standardization to augment the Government standard hash algorithms specified in Federal Information Processing Standard (FIPS) 180, Secure Hash Standard. NIST announced the selection of Keccak as the winning algorithm in a press release issued on October 2, 2012, which is available at https://www.nist.gov/ itl/csd/sha-100212.cfm. Draft FIPS 202 specifies the new ``Secure Hash Algorithm-3'' (SHA-3) family of permutation-based functions based on Keccak. Four fixed-length cryptographic hash algorithms (SHA3-224, SHA3- 256, SHA3-384, and SHA3-512) and two closely related, ``extendable- output'' functions (SHAKE128 and SHAKE256) are specified in Draft FIPS 202; all six algorithms are permutation-based ``sponge'' functions. The four SHA-3 hash functions provide alternatives to the SHA-2 family of hash functions. The extendable-output functions (XOFs) can be specialized to hash functions, subject to additional security considerations, or used in a variety of other applications. Hash algorithms are used in many information security applications, including (1) the generation and verification of digital signatures, (2) key-derivation functions, and (3) random bit generation. Both FIPS 180-4 and Draft FIPS 202 specify cryptographic hash algorithms. FIPS 180-4 specifies SHA-1 and the SHA-2 family of hash functions, and mandates the use of one of these functions for Federal applications that require a cryptographic hash function. Draft FIPS 202 specifies the new SHA-3 family of hash and extendable-output functions. To allow the use of the functions specified in either FIPS 180-4 or Draft FIPS 202 for Federal applications that require a cryptographic hash function, NIST proposes revising the Applicability Clause (6) of the Announcement Section of FIPS 180-4; the other sections of FIPS 180-4 remain unchanged. The NIST Policy on Hash Functions, available at https://csrc.nist.gov/groups/ST/hash/ policy.html, provides guidance on the choice of hash functions for specific applications. NIST invites public comments on Draft FIPS 202, which is available at https://csrc.nist.gov/publications/PubsDrafts.html, and on the proposed revision of the Applicability Clause of the Announcement Section of FIPS 180-4, available at https://csrc.nist.gov/publications/ PubsFIPS.html. After the comment period closes, NIST will analyze the comments, make changes to the respective documents, as appropriate, and then propose Draft FIPS 202 and the revised FIPS 180-4 to the Secretary of Commerce for approval.

The Board of Overseers of the Malcolm Baldrige National Quality Award (Board of Overseers) and the Judges Panel of the Malcolm Baldrige National Quality Award (Judges Panel) will meet together in open session on Thursday, June 12, 2014, from 8:30 a.m. to 3:00 p.m. Eastern time. The Board of Overseers, appointed by the Secretary of Commerce, reports the results of the Malcolm Baldrige National Quality Award (Award) activities to the Director of The National Institute of Standards and Technology (NIST) each year, along with its recommendations for the improvement of the Award process. The Judges Panel, also appointed by the Secretary of Commerce, ensures the integrity of the Award selection process and recommends Award recipients to the Secretary of Commerce. The purpose of this meeting is to discuss and review information received from the National Institute of Standards and Technology and from the Chair of the Judges Panel. The agenda will include: Baldrige Program Update, Baldrige Fundraising Update, Baldrige Judges Panel Update, Ethics Review, Applicants and Eligibility, and New Business/Public Comment.

The Information Security and Privacy Advisory Board (ISPAB) will meet Wednesday, June 11, 2014, from 8:00 a.m. until 5:00 p.m. Eastern Time, Thursday, June 12, 2014, from 8:00 a.m. until 5:00 p.m. Eastern Time, and Friday, June 13, 2014, from 8:00 a.m. until 12:00 p.m. Eastern Time. All sessions will be open to the public.

The Visiting Committee on Advanced Technology (VCAT or Committee), National Institute of Standards and Technology (NIST), will meet in open session on Wednesday, June 11, from 8:15 a.m. to 4:00 p.m. Eastern Time. The VCAT is composed of fifteen members appointed by the NIST Director who are eminent in such fields as business, research, new product development, engineering, labor, education, management consulting, environment, and international relations.

The Department of Commerce, as part of its continuing effort to reduce paperwork and respondent burden, invites the general public and other Federal agencies to take this opportunity to comment on proposed and/or continuing information collections, as required by the Paperwork Reduction Act of 1995.

The National Institute of Standards and Technology (NIST) seeks comments on the draft NIST Framework and Roadmap for Smart Grid Interoperability Standards, Release 3.0. This new document builds on two previously released Frameworks and Roadmaps, and incorporates advances in smart grid infrastructure, such as widespread deployment of wireless-communication power meters, the availability of customer energy usage data through the Green Button initiative, and remote sensing for determining real-time transmission and distribution status. Release 3.0 also includes protocols for electric vehicle charging. The entire draft version of the draft NIST Framework and Roadmap for Smart Grid Interoperability Standards, Release 3.0, is available online at: https://www.nist.gov/smartgrid/framework3.cfm.

The Department of Commerce, as part of its continuing effort to reduce paperwork and respondent burden, invites the general public and other Federal agencies to take this opportunity to comment on proposed and/or continuing information collections, as required by the Paperwork Reduction Act of 1995.

The National Institute of Standards and Technology (NIST) invites organizations to provide products and technical expertise to support and demonstrate security platforms for identity and access management for the electric power sector. This notice is the initial step for the National Cybersecurity Center of Excellence (NCCoE) in collaborating with technology companies to address cybersecurity challenges identified under the Energy Sector program. Participation in the use case is open to all interested organizations.

The National Institute of Standards and Technology (NIST) announces the Intersection of Cloud and Mobility Forum and Workshop to be held on Tuesday, March 25, Wednesday, March 26, and Thursday, March 27, 2014. The format is a three-day forum with breakout sessions held each day. The meeting was originally scheduled for October 1-3, 2013 and was rescheduled as a result of the government shutdown due to a lapse in appropriations. The NIST Intersection of Cloud and Mobility Forum and Workshop will bring together leaders and innovators from industry, academia and government in an interactive format that combines keynote presentations, panel discussions, interactive breakout sessions, and open discussion. The forum and workshop are open to the general public. NIST invites organizations to display posters and participate as exhibitors as described in the SUPPLEMENTARY INFORMATION section below.

The Smart Grid Advisory Committee (SGAC or Committee), will meet in open session on Tuesday, March 18, 2014 from 8:30 a.m. to 5:00 p.m. Eastern time and Wednesday, March 19, 2014 from 8:30 a.m. to 12:00 p.m. Eastern time. The primary purposes of this meeting are to discuss the updated NIST Framework and Roadmap for Smart Grid Interoperability Standards, updated Guidelines for Smart Grid Cyber Security (NISTIR 7628), NIST Smart Grid Testbed activities, and interactions between Cyber-Physical Systems and Smart Grid. The agenda may change to accommodate Committee business. The final agenda will be posted on the Smart Grid Web site at https://www.nist.gov/smartgrid.

This notice announces the issuance of the Cybersecurity Framework (the ``Cybersecurity Framework'' or ``Framework''). The Framework was developed by NIST using information collected through the Request for Information (RFI) that was published in the Federal Register on February 26, 2013, a series of open public workshops, and a 45-day public comment period announced in the Federal Register on October 29, 2013. The Framework was developed in response to NIST responsibilities directed in Executive Order 13636, ``Improving Critical Infrastructure Cybersecurity'' (``Executive Order''). Under the Executive Order, the Secretary of Commerce is tasked to direct the Director of NIST to lead the development of a framework to reduce cyber risks to critical infrastructure. The Framework consists of standards, methodologies, procedures and processes that align policy, business, and technological approaches to address cyber risks. The Framework is available electronically from the NIST Web site at: https:// www.nist.gov/cyberframework.

The National Institute of Standards and Technology (NIST), Department of Commerce, intends to sponsor a Federally Funded Research and Development Center (FFRDC) to facilitate public-private collaboration for accelerating the widespread adoption of integrated cybersecurity tools and technologies. NIST published three notices in the Federal Register advising the public of the agency's intention to sponsor an FFRDC and requesting comments from the public. This notice provides NIST's analysis of the comments related to NIST's proposed establishment of the FFRDC received in response to those notices. These responses, as well as NIST's responses to the many acquisition-related comments and questions received in response to the three notices will be posted on FedBizOpps.

The 99th Interim Meeting of the National Conference on Weights and Measures (NCWM) will be held in Albuquerque, New Mexico, January 19 to 22, 2014. This notice contains information about significant items on the NCWM Committee agendas, but does not include all agenda items. As a result, the items are not consecutively numbered.

The Department of Commerce, as part of its continuing effort to reduce paperwork and respondent burden, invites the general public and other Federal agencies to take this opportunity to comment on proposed and/or continuing information collections, as required by the Paperwork Reduction Act of 1995.

The Information Security and Privacy Advisory Board (ISPAB) will meet Thursday, December 19, 2013, from 8:00 a.m. until 5:00 p.m. Eastern Time, and Friday, December 20, 2013, from 8:00 a.m. until 5:00 p.m. Eastern Time. All sessions will be open to the public.

The Advanced Manufacturing National Program Office (AMNPO), hosted by the National Institute of Standards and Technology (NIST), announces the release for public comment of two AMNPO draft documents entitled Draft Guidance on Intellectual Property Rights for the National Network for Manufacturing Innovation and Draft Institute Performance Metrics for the National Network for Manufacturing Innovation. The first document describes draft guidance pertaining to intellectual property (IP) management, and the second document describes draft institute performance metrics, for the proposed National Network for Manufacturing Innovation (NNMI) and the individual manufacturing innovation institutes that compose the network. These two documents were produced by the federal interagency AMNPO, hosted by NIST. The AMNPO seeks public comments on the two documents. All comments received will be made publicly available.

The National Institute of Standards and Technology (NIST) invites and requests nomination of individuals for appointment to eight existing Federal Advisory Committees: Board of Overseers of the Malcolm Baldrige National Quality Award, Judges Panel of the Malcolm Baldrige National Quality Award, Information Security and Privacy Advisory Board, Manufacturing Extension Partnership Advisory Board, National Construction Safety Team Advisory Committee, Advisory Committee on Earthquake Hazards Reduction, NIST Smart Grid Advisory Committee, and Visiting Committee on Advanced Technology. NIST will consider nominations received in response to this notice for appointment to the Committees, in addition to nominations already received. Registered Federal lobbyists may not serve on NIST Federal Advisory Committees.

The National Institute of Standards and Technology (NIST) is hereby providing notice of two, program-wide, limited public interest waivers of the Buy American requirements set forth in the American Recovery and Reinvestment Act of 2009 (ARRA). The two limited, program- wide, public interest waivers set forth in this Notice apply to projects constructed by recipients receiving financial assistance awards (grants) pursuant to the NIST ARRA Construction Grant Program to which the ARRA Buy American requirements apply. The first limited, program-wide, public interest waiver applies to a grant recipient's use of a de minimis amount of non-domestic iron, steel or manufactured goods that, in the aggregate, comprises no more than five percent of the total cost of the iron, steel and manufactured goods used in a grant recipient's ARRA construction project. The second limited, program-wide, public interest waiver applies to a grant recipient's use of non-domestic manufactured goods where such non- domestic goods are necessary for the integration and operation of the recipient's construction project into the recipient's existing safety and security systems. Both program-wide, public interest waivers of the Buy American requirements apply over the entire award period of the grant projects. The two, limited, public interest Buy American waivers set forth in this Notice do not apply to procurement contracts issued pursuant to the NIST ARRA Construction of Research Facilities program.

The National Institute of Standards and Technology (NIST) seeks comments on draft NISTIR 7628 Rev. 1, Guidelines for Smart Grid Cyber Security. Draft NISTIR 7628 Rev. 1 was completed by the NIST-led Smart Grid Cybersecurity Committee (formerly the Cyber Security Working Group) of the Smart Grid Interoperability Panel. The document has been updated to address changes in technologies and implementations since the release of NISTIR 7628 in September 2010. In addition, the document development strategy, cryptography and key management, privacy, vulnerability classes, research and development topics, standards review, and key power system use cases have been updated and expanded to reflect changes in the Smart Grid environment since 2010. The final version is expected to be posted in the fall of 2013.

The National Institute of Standards and Technology (NIST) invites interested parties to provide their perspectives on the appropriate model for NIST administration and support of discipline- specific Guidance Groups (``Guidance Groups'') to be established pursuant to the Memorandum of Understanding (MOU) between the Department of Justice (DOJ) and the National Institute of Standards and Technology. NIST seeks to identify and understand approaches for the structure of effective and sustainable Guidance Groups. This Notice does not solicit comments or advice on the policies that should be addressed by the Guidance Groups. Responses to this Notice will serve only as input for NIST's consideration of a model to establish and administer the Guidance Groups.

The Visiting Committee on Advanced Technology (VCAT or Committee), National Institute of Standards and Technology (NIST), will meet in open session on Tuesday, October 8, 2013, from 9:00 a.m. to 1:45 p.m. Eastern Time. The VCAT is composed of fifteen members appointed by the NIST Director who are eminent in such fields as business, research, new product development, engineering, labor, education, management consulting, environment, and international relations.

This notice announces the Secretary of Commerce's approval of Federal Information Processing Standard (FIPS) Publication 201-2, Personal Identity Verification (PIV) of Federal Employees and Contractors. FIPS 201-2 includes clarifications to existing text, additional text in cases where there were ambiguities, adaptation to changes in the environment since the publication of FIPS 201-1, and specific changes requested by Federal agencies and implementers.

The National Institute of Standards and Technology (NIST) announces the Intersection of Cloud and Mobility Forum and Workshop to be held on Tuesday, October 1, Wednesday, October 2, and Thursday, October 3, 2013. The format is a three-day forum with breakout sessions held each day. The NIST Intersection of Cloud and Mobility Forum and Workshop will bring together leaders and innovators from industry, academia and government in an interactive format that combines keynote presentations, panel discussions, interactive breakout sessions, and open discussion. The forum and workshop are open to the general public. NIST invites organizations to display posters and participate as exhibitors as described in the SUPPLEMENTARY INFORMATION section below.

The National Institute of Standards and Technology (NIST) announces that the Manufacturing Extension Partnership (MEP) Advisory Board will hold an open meeting on Friday, September 27, 2013 from 8:30 a.m. to 5:00 p.m. Eastern Time.

NIST announces the Genome in a Bottle Consortium meeting to be held on Thursday and Friday, August 15 and 16, 2013. The Genome in a Bottle Consortium is developing the reference materials, reference methods, and reference data needed to assess confidence in human whole genome variant calls. A principal motivation for this consortium is to enable performance assessment of sequencing and science-based regulatory oversight of clinical sequencing. The purpose of this meeting is to update participants about progress of the consortium work, continue to get broad input from individual stakeholders to update or refine the consortium work plan, continue to broadly solicit consortium membership from interested stakeholders, and invite members to participate in work plan implementation.