DOD probes industry about software-defined encryption as U.S. scurries to get quantum-safe
The Pentagon is searching for interim software-only cryptographic solutions that require zero hardware changes to protect military systems during its transition to post-quantum cryptography.
A request for information released on Thursday sets clear, operational baselines for vendors and signals that the Defense Department is executing on its nascent campaign to prepare for existential quantum threats.
“The desired solution should provide utility-based, data packet-level cryptographic protection that aligns with the government’s PQC migration strategy and implementation plan, scheduled for on or before December 31, 2029,” officials wrote in the RFI.
Quantum information science applies complex phenomena happening at atomic and subatomic levels to store, move, manipulate, process, and measure data and information.
Once they can be exploited at-scale, potentially in the near future, quantum technologies are expected to spark disruptive advancements, like encryption-breaking algorithms and unhackable communication networks.
DOD’s PQC strategy — published by the chief information officer in June, the day after the White House issued new quantum policies — outlines the department’s modern scheme to prepare “for a future battle space enabled by Cryptographically Relevant Quantum Computers.”
The Pentagon’s 25-page plan instructs personnel to ensure all systems support PQC by Dec. 31, 2030, and that every DOD system uses PQC, unless otherwise specified, no later than Dec. 31, 2031.
In the new RFI, defense officials stated that “as outlined in recent guidance,” DOD must review all of its programs of record to determine the feasibility of incorporating advanced cryptographic protection.
“A key constraint of this initiative is that the solution must be software-only and must not require the replacement, modification, or augmentation of existing hardware components such as chips, cryptographic cards, radios, hardware security modules or other physical components,” they wrote.
The market research document notably outlines how the Pentagon is approaching strict PQC technical parameters and specific post-quantum standards.
“Technology must be capable of advancing data protection capabilities while ensuring the Department retains full control and sovereignty over its data and cryptographic keys,” officials wrote in the RFI.
Industry responses are due by Sept. 27.
Interested vendors are asked to submit information about PQC products and processes that can strengthen the DOD’s “ability to support Presidential and Congressional priorities, and warfighter spectrum requirements.”
