US federal agency adds post quantum encryption to 15 sites without replacing any hardware

Started by Amber90, Yesterday at 11:06 PM

Previous topic - Next topic

0 Members and 2 Guests are viewing this topic.

Topic: US federal agency adds post quantum encryption to 15 sites without replacing any hardware   Views(Read 83 times)
Active members in this topic:
Amber90(1)

Amber90

An unnamed US federal agency has deployed Quantum XChange's Phio TX-EM to add post quantum cryptography across 15 production sites in the US and abroad, Quantum Zeitgeist reports. The agency is not named because of its sensitive mission. The interesting part is that no infrastructure had to be replaced. The product runs as a container on the agency's existing SKIP enabled routers

That approach made the rollout fast. Some sites were fully deployed in as little as an hour each. The agency's own IT staff installed and now run the system, without any specialist post quantum training. For anyone who has sat through a long network upgrade, an hour per site sounds almost too good to be true

The driver is a federal requirement for compliance by 31 December 2030. Phio TX-EM is described as crypto agile, meaning it can switch algorithms without interrupting traffic if NIST standards or threats change. Strong symmetric keys are delivered out of band, separate from the data path, and short lived keys are generated and then wiped from memory. The product holds FIPS 140-3 and FIPS 203 validations

CEO Eddy Zervigon said federal agencies do not have the luxury of waiting for their next technology refresh. He added that agencies can add post quantum protection to the infrastructure they already operate. The agency also gets to keep its planned hardware upgrades on their normal schedule. That avoids the classic problem of a security deadline forcing an expensive early refresh

This is a vendor story, so treat the claims with the usual caution. Still, the general idea of layering post quantum protection on top of existing kit is important. Most organisations cannot rip out every router and VPN box at once. Products that buy time while hardware catches up will be in demand for years

Is layering post quantum protection on old kit a smart stopgap or a risky shortcut? And how far along is your workplace with any of this?