NIST (National Institute of Standards and Technology)

The US National Institute of Standards and Technology develops the cryptographic and cybersecurity standards that anchor much of the world's security baseline: FIPS 197 (AES), FIPS 186 (digital signatures), the SP 800 series (key management, identity, IoT), the NIST Cybersecurity Framework, and the ongoing Post-Quantum Cryptography standardisation programme.

Categories: Core NetworkIdentity and SubscriberSecurity Controls

NIST in context

The mobile core is where subscriber sessions, mobility and policy live. In 4G it is the EPC (MME, HSS, S/PGW); in 5G it is the Service-Based Architecture with AMF, SMF, UPF, AUSF, UDM and the NRF. Core exposure is the difference between a single-subscriber leak and a fleet-wide breach.

Subscriber identifiers (IMSI, SUPI, MSISDN, IMEI) are the anchor for authentication, charging, lawful interception and fraud analytics. Any protocol or interface that leaks a permanent identifier is treated as a serious privacy defect, which is why 5G introduced SUCI concealment on the air interface.

To place NIST in the wider telecom-security picture, review OASIS, UDM, WPA, WPA3, Cryptography and IETF.

Related terms

Related topic hubs

  • 6G Security Emerging 6G threat model, AI/ML surfaces and post-quantum concerns.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.