Proposed Withdrawal of Federal Information Processing Standards (FIPS) 198-1, The Keyed-Hash Message Authentication Code (HMAC)

National Institute of Standards and Technology, Department of Commerce.

Notice; request for comments.

The National Institute of Standards and Technology (NIST) proposes to withdraw FIPS 198-1, the Keyed-Hash Message Authentication Code (HMAC), from the FIPS series.

Prior to the submission of this proposed withdrawal of FIPS 198-1 to the Secretary of Commerce for review and approval, NIST invites comments from the public, users, the information technology industry, and Federal, State, and local governments, and government organizations concerning the withdrawal of this FIPS.

Comments on the proposed withdrawal of this FIPS must be received no later than 11:59 p.m. EDT on July 23, 2025.

Written comments concerning the withdrawal of FIPS 198-1 should be sent to: Crypto Publication Review Board, Computer Security Division, Information Technology Laboratory, National Institute of Standards and Technology, 100 Bureau Drive, Mail Stop 8930, Gaithersburg, MD 20899-8930, ATTN: FIPS 198-1 Comments.

Electronic comments should be sent to: [email protected].

Information about the FIPS is available on the NIST web page https://csrc.nist.gov/​pubs/​fips/​198-1/​final. Comments received in response to this notice will be published electronically on that page without change or redaction, so commenters should not include information they do not wish to be posted ( e.g. personal or confidential business information).