NIST 800-63B

Summary

NIST Special Publication 800-63B is a digital identity guideline that provides recommendations on types of authentication processes that may be used at various Authenticator Assurance Levels (AALs). It applies to the digital authentication of subjects to systems over a network. The version used for this section is NIST 800-63B.

Definitions

Definition	Requirements
NIST80063-5_1_1_2. Memorized secret verifiers	127. Store hashed passwords 132. Passphrases with at least 4 words 134. Store passwords with salt 135. Passwords with random salt 139. Set minimum OTP length 332. Prevent the use of breached passwords 333. Store salt values separately 334. Avoid knowledge-based authentication
NIST80063-5_1_3_2. Out-of-band verifiers	335. Define out of band token lifespan
NIST80063-5_1_4_2. Single-factor OTP verifiers	140. Define OTP lifespan
NIST80063-5_2_3. Use of biometrics	231. Implement a biometric verification component
NIST80063-5_2_5. Verifier impersonation resistance	088. Request client certificates
NIST80063-5_2_8. Replay resistance	030. Avoid object reutilization
NIST80063-6_1_1. Binding at enrollment	136. Force temporary password change 137. Change temporary passwords of third parties 367. Proper generation of temporary passwords
NIST80063-7_1. Session bindings	329. Keep client-side storage without sensitive data 025. Manage concurrent sessions 028. Allow users to log out 030. Avoid object reutilization 031. Discard user session data
NIST80063-7_1_1. Browser cookies	029. Cookies with security attributes

Last updated

2023/09/18