[EAS] NIST will require support for TLS 1.3 by January 1 2024

Sean Donelan sean at donelan.com
Mon Nov 4 17:31:22 CST 2019


Now that people are upgrading their systems to TLS 1.2.

Just so vendors, government agencies and EAS participants aren't caught 
unware...

NIST has announced by January 1, 2024 the next minimum appropriate secure 
transport protool will be TLS 1.3. I understand that is 5 years away
from now. Hopefully, that will be enough time for people to prepare.

https://csrc.nist.gov/publications/detail/sp/800-52/rev-2/final

Cryptography standards have been on a rolling basis since NIST took over 
the civilian role in 1978.  NSA still manages military cryptography 
standards (more or less, I know the actual details are messier).



More information about the EAS mailing list