# NIST Special Publications

All at csrc.nist.gov/pubs/sp/. PDFs at nvlpubs.nist.gov.

## Core Network Security

### SP 800-53 Rev. 5 (Update 1) -- Security and Privacy Controls
- Page: https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final
- PDF: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
- The master catalog. Every other framework (FedRAMP, CMMC, FISMA) maps back to this.

### SP 800-171 Rev. 3 -- Protecting CUI in Nonfederal Systems
- Page: https://csrc.nist.gov/pubs/sp/800/171/r3/final
- 110 security requirements. Basis for CMMC.

### SP 800-207 -- Zero Trust Architecture
- Page: https://csrc.nist.gov/pubs/sp/800/207/final
- PDF: https://nvlpubs.nist.gov/nistpubs/specialpublications/NIST.SP.800-207.pdf
- Canonical ZTA definition: logical components, deployment models, threats, migration.

### SP 800-207A -- ZTA for Cloud-Native Applications
- PDF: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207A.pdf

### SP 800-123 -- Guide to General Server Security
- Page: https://csrc.nist.gov/pubs/sp/800/123/final

### SP 800-41 Rev. 1 -- Firewalls and Firewall Policy
- PDF: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-41r1.pdf
- Packet filtering, stateful inspection, application proxy, policy design.

### SP 800-77 Rev. 1 -- Guide to IPsec VPNs
- Page: https://csrc.nist.gov/pubs/sp/800/77/r1/final
- PDF: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-77r1.pdf
- Updated 2020 with modern crypto recommendations.

### SP 800-113 -- Guide to SSL VPNs
- PDF: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-113.pdf

### SP 800-125B -- Secure Virtual Network Configuration
- PDF: https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-125b.pdf
- Virtual segmentation, SDN controller security.

## Wireless

### SP 800-97 -- Establishing Wireless Robust Security Networks
- PDF: https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-97.pdf

## Post-Quantum Cryptography

- PQC Project: https://csrc.nist.gov/projects/post-quantum-cryptography
- Three PQC standards published August 2024
- Hybrid TLS: X25519Kyber768 (classical ECDH + ML-KEM-768)
- NSA CNSA 2.0: quantum-safe required for new NSS by Jan 2027, full migration by 2035