Software Defined Encryption DoW CIO

The Department of War (DoW) is issuing a Request for Information (RFI) to identify commercially available, software‑only cryptographic solutions that can provide interim data‑protection while the agency migrates to post‑quantum cryptography (PQC) by 31 December 2029. The solution must be pure‑software, avoid any hardware changes, use ML‑KEM‑1024 for key encapsulation, employ ML‑DSA‑87 for digital signatures, integrate with the DoW’s PQC‑PKI, and give the DoW full sovereignty over cryptographic keys. Respondents must submit a security package (SSP, POA&M, Assessment Results, Assessment Plan), list any third‑party assessors, map FISMA controls satisfied, describe system architecture, provide a capability statement, past performance, risk assessment, and a rough order‑of‑magnitude cost estimate. Submissions are limited to seven single‑spaced pages in 12‑point Times New Roman, electronic only, and must be received by 12:00 PM ET on 27 September 2026. • Pure‑software encryption solution compatible with DoW’s PQC migration roadmap. • Must use ML‑KEM‑1024 for key exchange and ML‑DSA‑87 for signatures. • Must achieve security strength ≥ AES‑512. • Must integrate with existing PKI and support MFA tied to cryptographic identity. • Full key custody and sovereignty remain with DoW (no escrow or third‑party key storage). • Required deliverables: SSP, POA&M, Assessment Results, Assessment Plan, third‑party assessor info, FISMA control mapping, architecture description, ROM cost. • Submission limit: 7 pages, electronic PDF/Word only, addressed to Ms. Leanne Condren.