NIST is seeking public feedback on its 2009 publication SP 800-106, which provides guidelines for using randomized hashing in digital signatures. The publication was originally created to address security concerns with the SHA-1 hashing algorithm, but NIST is now questioning its relevance given the deprecation of SHA-1 and the improved security of SHA-2 and SHA-3.
NIST is specifically interested in whether there are any existing or new use cases that still depend on SP 800-106. The public comment period is open until March 16, 2022, and comments can address various aspects of the publication’s security, implementation, clarity, risk, and relevance to current applications. Comments should be sent to cryptopubreviewboard[at]nist.gov with “Comments on SP 800-106” in the subject line.
Keywords: Security, Hash, Cryptography, Standards, SHA-1
