IC Technology & Cyber — 2026-08-31
Pentagon Releases RFI for Software-Only Post-Quantum Cryptographic Solutions Ahead of 2029 Deadline
BLUFDOD's insistence on software-only solutions concedes it cannot replace cryptographic hardware before quantum threats mature, accepting transitional risk across military communications through at least 2029.
The Pentagon released a request for information on Thursday seeking software-only cryptographic solutions that require no hardware changes to protect military systems during the transition to post-quantum cryptography 1. Defense officials wrote that the desired solution should provide utility-based, data packet-level protection aligned with the government's PQC migration plan, which sets a December 31, 2029 deadline 1. The RFI states the solution must not require replacing, modifying, or augmenting existing hardware such as chips, cryptographic cards, radios, or hardware security modules 1. Officials added that any technology must let the department retain full control and sovereignty over its data and cryptographic keys, and industry responses are due by September 27 1.
Analysis
The RFI's software-only requirement and September 27 response deadline for market research rather than contract award indicate the Pentagon has concluded hardware replacement across programs of record before 2029 is not feasible, leaving software patches as an interim bridge while it scopes the vendor base rather than commits funds. The sovereignty requirement, that DOD retain full control over data and keys, signals concern about foreign or commercial dependency in whatever interim fix emerges. DefenseScoop's reporting draws solely on the RFI text with no independent corroboration, leaving the story single-source. The move may instead reflect scheduled execution of DOD's June PQC strategy rather than new urgency around the quantum threat, even as adversary campaigns like APT28's HOOKEDGE proceed on a timeline the department's modernization schedule does not control.
1 sources
- DOD probes industry about software-defined encryption as U.S. scurries to get quantum-safe - DefenseScoop
View in full brief →