HMAC's Last Stand: NIST Proposes Security Standard Sunset
Published Date: 6/23/2025
Notice
Summary
NIST wants to retire the old HMAC security standard (FIPS 198-1) and is asking everyone—tech pros, governments, and the public—for their thoughts before making it official. This change affects anyone using this standard for securing info, so it’s a heads-up to prepare for updates. No big costs expected, but staying in the loop now means smoother transitions later!
Analyzed Economic Effects
1 provisions identified: 0 benefits, 0 costs, 1 mixed.
NIST proposes withdrawing HMAC standard
The National Institute of Standards and Technology (NIST) proposes to withdraw FIPS 198-1, the Keyed-Hash Message Authentication Code (HMAC). If you or your organization use HMAC to secure information, this is a heads-up to prepare for updates and consider submitting comments; NIST is asking for input from the public, the IT industry, and Federal, State, and local governments. The notice says no big costs are expected from the withdrawal.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2026-19147, Request for Information (RFI) on Future Needs for Medical Metrology and Standards for Medical Imaging, Devices, Diagnostics and Therapy
NIST and NIBIB want your ideas to help improve the rules and measurements for medical imaging, devices, and tests. They’re hosting a big meeting on September 24, 2026, to talk about the future of healthcare tech and want feedback by November 30, 2026. This will guide new government programs to make medical tools safer and better for everyone.
2026-19088, Information Collection Activities; Submission to the Office of Management and Budget (OMB) for Review and Approval; Comment Request; iEdison System
The National Institute of Standards and Technology (NIST) is updating the iEdison system, which helps researchers report inventions made with federal funding. This affects over 6,000 users who must submit invention and patent info, with some changes to reporting rules. The update aims to keep things smooth and clear, with a 30-day public comment window starting now—no extra costs, just better paperwork!
2026-18561, Proposed Voluntary Product Standard PS 2-25, Performance Standard for Wood Structural Panels
NIST is updating the rules for wood panels used in building floors and walls to make sure they’re strong and reliable. This affects manufacturers, sellers, and builders who use these panels. You’ve got until October 13, 2026, to share your thoughts, and these changes aim to keep construction safe without adding extra costs.
2026-17760, Agency Information Collection Activities; Submission to the Office of Management and Budget (OMB) for Review and Approval; Comment Request; Streamlined Supply Chain Information Collection Request
The Department of Commerce, in accordance with the Paperwork Reduction Act of 1995 (PRA), invites the general public and other Federal agencies to comment on proposed, and continuing information collections, which helps us assess the impact of our information collection requirements and minimize the public's reporting burden. The purpose of this notice is to allow for 60 days of public comment preceding submission of the collection to OMB.
2026-17569, Agency Information Collection Activities; Submission to the Office of Management and Budget (OMB) for Review and Approval; Comment Request; NIST MEP Client Impact Survey
The Department of Commerce, in accordance with the Paperwork Reduction Act of 1995 (PRA), invites the general public and other Federal agencies to comment on proposed, and continuing information collections, which helps us assess the impact of our information collection requirements and minimize the public's reporting burden. The purpose of this notice is to allow for 60 days of public comment preceding submission of the collection to OMB.
2026-17319, Information Collection Activities; Submission to the Office of Management and Budget (OMB) for Review and Approval; Comment Request; Form NIST-366A: Request for Personal Radiation Monitoring Services
Previous / Next Documents
Previous: 2025-11491, Cooperative Research and Development Agreement (CRADA)-“Very High Frequency Data Exchange System (VDES) Satellite Connectivity and Service”
The U.S. Coast Guard is teaming up with SPACE NORWAY to test a new satellite system called VDES that could boost their communication at sea. They’re also inviting other groups to join in and help improve this technology. This partnership aims to make Coast Guard operations smarter and faster, with opportunities opening soon for others to get involved.
Next: 2025-11498, Notice of Public Meeting of the District of Columbia Advisory Committee to the U.S. Commission on Civil Rights
The District of Columbia Advisory Committee is meeting online to talk about what they learned from a June 16th briefing on how students with disabilities get services in DC public schools. They’ll plan their next steps to add more info to their report. This meeting affects students, families, and educators in DC and helps make sure everyone gets fair access to school services.