Pentagon Seeks Software-Only Encryption to Bridge Post-Quantum Transition

The Defense Department is asking industry for interim, software-only cryptographic solutions that require no hardware changes to protect military systems during its shift to post-quantum cryptography. A request for information released Thursday sets operational baselines for vendors and signals the Pentagon is executing on its campaign to prepare for quantum threats to encryption.

The RFI follows the DOD chief information officer's PQC strategy, published in June, one day after the White House issued new quantum policies. That plan outlines the department's scheme to prepare for a future battle space enabled by Cryptographically Relevant Quantum Computers. The Pentagon's 25-page document instructs personnel to ensure all systems support PQC by December 31, 2030, and that every DOD system uses PQC, unless otherwise specified, no later than December 31, 2031.

In the RFI, officials wrote that the desired solution should provide utility-based, data packet-level cryptographic protection aligned with the government's PQC migration strategy and implementation plan, scheduled for on or before December 31, 2029. They stated that as outlined in recent guidance, DOD must review all of its programs of record to determine the feasibility of incorporating advanced cryptographic protection.

Officials set a strict boundary on the effort. The solution must be software-only and must not require the replacement, modification, or augmentation of existing hardware components such as chips, cryptographic cards, radios, hardware security modules, or other physical components. The document also outlines how the Pentagon is approaching PQC technical parameters and specific post-quantum standards, stating that any technology must advance data protection while ensuring the department retains full control and sovereignty over its data and cryptographic keys.

Quantum information science applies phenomena at atomic and subatomic levels to store, move, manipulate, process, and measure data. Once exploited at scale, potentially in the near future, quantum technologies are expected to spark disruptive advancements, including encryption-breaking algorithms and unhackable communication networks. The Pentagon's RFI asks interested vendors to submit information about PQC products and processes that can strengthen the department's ability to support Presidential and Congressional priorities and warfighter spectrum requirements.

Industry responses are due by September 27.