3.5.10: Store and transmit only cryptographically-protected passwords

Control Family:

Identification and Authentication

Control Type:

Derived

CSF v1.1 References:

Discussion

Cryptographically-protected passwords use salted one-way cryptographic hashes of passwords. See [NIST CRYPTO].

Related Controls

NIST Special Publication 800-53 Revision 5

Critical Security Controls Version 8

NIST Special Publication 800-53 Revision 4

Critical Security Controls Version 7.1