The load-bearing documents for a DIB program — CMMC / DFARS regulatory text (eCFR), federal rulemaking, NIST publications and OIRA review — organized as a library. Pick a document; the reader shows the dex dossier: what it says, why it matters, and the concrete obligations it imposes. Originals open at the source.
CSWP 36F, Initial NAS Message Security: Applying 5G Cybersecurity and Privacy CapabilitiesInitial Public Draft
This draft white paper details how 5G networks enhance security by encrypting and protecting initial handshake messages, a vulnerability in previous cellular generations, and provides guidance for verification and implementation.
<p>This NIST Cybersecurity White Paper describes a 5G security feature that protects sensitive information in the Initial Non-Access Stratum (NAS) Message and explains how organizations can verify these protections in deployed 5G networks.<o></o></p> <p>This white paper is part of the NCCoE’s work to accelerate the adoption of 5G security features by demonstrating their implementation on our operational 5G security testbed and providing actionable implementation guidelines to help network operators enhance the cybersecurity and privacy of 5G systems and supporting infrastructures. <o></o></p> <h5><b>Background<o></o></b></h5> <p>Current 5G standards include specifications to address cybersecurity and privacy challenges present in previous generations of cellular systems. In 4G, the initial handshake message used to establish a connection between the device and the network—the Initial NAS Message—was sent without encryption or integrity protection. This leaves the 4G user device and the core network vulnerable to man-in-the-middle attacks.<o></o></p> <p>Current 5G specifications allow the device to send the security-sensitive contents of the initial NAS message in an encrypted and integrity protected form.<o></o></p> <p>This White Paper describes how the NCCoE demonstrated these capabilities and explains how organizations can verify these protections in deployed 5G networks to protect the security and privacy on their networks. <o></o></p> <p>By demonstrating security features on our operational 5G Testbed, we aim to deliver real-world implementation insights to advance 5G security and inform the next generation of wireless security. <o></o></p> <h5><b>Submit Your Feedback!<o></o></b></h5> <p>This White Paper is available for public comment through <strong>September 7, 2026</strong>. Visit the <a href="https://www.nccoe.nist.gov/5g-cybersecurity">NCCoE 5G Cybersecurity</a> project page to learn more and download the White Paper today!</p>