On November 4, NIST announced plans to revise SP 800-108r1, its recommendation on key derivation using pseudorandom functions. The agency says recent research has raised concerns about certain constructions, including their output indistinguishability and key-control security properties.

The planned revision could clarify security requirements, update constructions and reconsider guidance for CMAC-based designs and Double-Pipeline Iteration Mode. NIST invites feedback on implications for implementations, interoperability and validation through December 18. This is a pre-draft consultation: the announcement does not present a new final version of the recommendation.

Original source

NIST

Pre-Draft Call for Comments: Key Derivation Using Pseudorandom Functions

Primary institutional source; this is a review process, not confirmation of a universal vulnerability.

Original CYBERSEC.mx summary based on the linked sources. Refer to the original documents for technical details and updates.