From msuinfo!agate!spool.mu.edu!sdd.hp.com!saimiri.primate.wisc.edu!news.doit.wisc.edu!decwrl!waikato!aukuni.ac.nz!cs18.cs.aukuni.ac.nz!pgut1 Mon Nov 22 21:44:53 1993
Newsgroups: sci.crypt
Path: msuinfo!agate!spool.mu.edu!sdd.hp.com!saimiri.primate.wisc.edu!news.doit.wisc.edu!decwrl!waikato!aukuni.ac.nz!cs18.cs.aukuni.ac.nz!pgut1
From: pgut1@cs.aukuni.ac.nz (Peter Gutmann)
Subject: Summary: Getting FIPS Pubs
Organization: Computer Science Dept. University of Auckland
Date: Sat, 20 Nov 1993 12:10:57 GMT
Message-ID: <1993Nov20.121057.29093@cs.aukuni.ac.nz>
Lines: 44

Getting these things isn't so easy after all:  The NIST ftp site,
csrc.ncsl.nist.gov, only has a single FIPS pub, 171, which isn't much use.  As
for the phone numbers, I tried the freebies first, so initially I called NIST
itself at 301-975-2816. They redirected me to NTIS (I guess they're all going
to FLA's from TLA's now). Then I tried some mysterious organization at
410-766-8729 which someone suggested, but they redirected me to a slightly
different number at NIST.  In the end I gave in and called NTIS on
703-487-4650, and ended up being dumped into an interminable voicemail system.
At about $3/minute I decided I didn't really want to sit there listening to
"Press 1 to continue, 2 to initiate global thermonuclear warfare, 3 to return
to this message", so I've left it for now.  In case anyone's interested, the
full contact details are:
 
     National Technical Information Service
     U.S. Department of Commerce
     5285 Port Royal Road
     Springfield, VA 22161
     Telephone (703) 487-4650, FTS: 737-4650
 
Thanks to everyone who responded, I might retry NTIS at some point (or fax them,
I'm sure they won't have a voicemail system on that line :-).
 
The useful docs I know of are the following:
 
FIPS PUB 46, "Data Encryption Standard," January 15, 1977, reaffirmed 1992.
FIPS PUB 74, "Guidelines for Implementing and Using the NBS Data Encryption
              Standard", April 1981.
FIPS PUB 81, "DES Modes of Operation", 1980 December 2.
FIPS PUB 112, "Password Usage", May 1985.
FIPS PUB 113, "Computer Data Authentication", May 1985.
FIPS PUB 180, "Secure Hash Standard", October 1993.
FIPS PUB ???, "Digital Signature Standard" (draft only, no assigned pub.no).
Federal Standard 1026, "Interoperability and Security Requirements for
                        Use of the Data Encryption Standard in the Physical
                        Layer of Data Communications," August 3, 1983.
                        Equivt. to FIPS PUB 139.
Federal Standard 1027, "General Security Requirement for Equipment
                        Using the Data Encryption Standard." April 14, 1982.
                        Equivt. to FIPS PUB 140.
National Bureau of Standards Special Publication 500-20:  Validating the
                        Correctness of Hardware Implementations of the NBS
                        Data Encryption Standard," September, 1980.
 
Peter.