On 2 December 2025, the National Information Security Standardisation Technical Committee (TC260) adopted the technical requirements for cryptography and related security of identity-based cryptographic authentication systems (GB/T 46798-2025). The technical requirements apply to password authentication systems and set out the security requirements for password generation and management services. The technical requirements enter into force on 1 July 2026.
Original source