From NIST security review the following suggestion has been made. Security algorithms typically have an expected lifetime, in that as computing power expands a security algorithm is expected to be able to e broken using a brute force method . The Specification should describe this idea and indicate that security policy will be updated. It may also be helpful if the standard reference some other document that describes this expected lifetime and /or make prediction on when security policies will expire.