2025-11497Notice

HMAC's Last Stand: NIST Proposes Security Standard Sunset

Published Date: 6/23/2025

Notice

Summary

NIST wants to retire the old HMAC security standard (FIPS 198-1) and is asking everyone—tech pros, governments, and the public—for their thoughts before making it official. This change affects anyone using this standard for securing info, so it’s a heads-up to prepare for updates. No big costs expected, but staying in the loop now means smoother transitions later!

Analyzed Economic Effects

1 provisions identified: 0 benefits, 0 costs, 1 mixed.

NIST proposes withdrawing HMAC standard

The National Institute of Standards and Technology (NIST) proposes to withdraw FIPS 198-1, the Keyed-Hash Message Authentication Code (HMAC). If you or your organization use HMAC to secure information, this is a heads-up to prepare for updates and consider submitting comments; NIST is asking for input from the public, the IT industry, and Federal, State, and local governments. The notice says no big costs are expected from the withdrawal.

Personalized for You

How does this regulation affect your finances?

Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Key Dates

Published Date
6/23/2025

Department and Agencies

Department
Independent Agency
Agency
Commerce Department
National Institute of Standards and Technology
Source: View HTML

Related Federal Register Documents

Previous / Next Documents

Back to Federal Register