Assurance

[Mark John Rank <>]

Bob:

Yeah, I leafed through the public comment draft.  Near as I could
tell, the majority of the pages came from additional discussions about
other Auth mechanisms.  Appendix A looked unchanged to me.

Mark


------------------------------------------
Mark Rank - IAM Program Manager
University Information Technology Services 
UW-Milwaukee                       
Email: 

            
Phn:  414-229-3706     
------------------------------------------

----- Original Message -----
From: "RL 'Bob' Morgan" 
<>
To: 

Sent: Tuesday, December 13, 2011 12:37:48 PM
Subject: Re: [Assurance] Password scheme design tool...


Also worth noting perhaps that the long-awaited revision to NIST SP 800-63 
(800-63 Rev 1) has been published this month, see

  http://csrc.nist.gov/publications/PubsSPs.html

As before Appendix A has a lot of material about password entropy.  I 
don't know if it differs substantially from previous versions of 800-63. 
Still no spreadsheet as far as I can tell.  But the overall document has 
gone from 54 to 109 pages, so it must be twice as good.

  - RL "Bob"