Quantum XChange has become the first company to offer a FIPS-validated post-quantum cryptography solution within the Cisco Networking App Marketplace. Phio TX-EM, the company’s containerized application, delivers quantum-safe keys to existing Cisco routers and switches without requiring added hardware or network downtime, the company says. “Phio TX-EM is a FIPS-validated container that delivers quantum-safe keys to the network through Cisco’s SKIP API,” said Tom Butta, Chief Commercial and Marketing Officer at Quantum XChange, emphasizing the solution’s ease of integration and verification for Cisco customers preparing for post-quantum migrations.
FIPS Validation of Phio TX-EM for Cisco Marketplace
This validation confirms the containerized application meets stringent federal security requirements, offering Cisco customers a verified path toward quantum-resistant network security without requiring immediate hardware upgrades. The certification process included rigorous testing of the software’s cryptographic modules and key management practices, assuring adherence to established security standards. This deployment strategy avoids the costs and disruptions typically associated with cryptographic overhauls.
Unlike traditional key management systems requiring dedicated appliances, Phio TX-EM runs as a container on Cisco Catalyst 8000 Series products and Nexus switches, using existing network infrastructure, according to the company. This approach allows organizations to address the growing threat of “Harvest Now, Decrypt Later” attacks, where adversaries collect encrypted data with the intention of decrypting it once quantum computers become powerful enough, without extensive infrastructure changes.
Phio TX-EM’s architecture is designed for both security and agility, supporting large-key algorithms like classic McEliece without necessitating network frame modifications. Algorithm updates can be implemented dynamically, allowing organizations to adapt to evolving NIST and international standards without network downtime. The system also employs ephemeral keypairs, generated and deleted after each use, and uses out-of-band symmetric key delivery to further enhance security, the company says.
Static private or pre-shared keys are never stored, mitigating the risk of compromise. Continuous key rotation and intelligent key routing are integral to the software’s design, enabling secure key distribution across distributed, multi-site architectures, including Cisco DMVPN deployments. Quantum XChange’s Hive architecture provides unified key management across every network node, simplifying administration and enhancing overall security posture. The containerized nature of Phio TX-EM also facilitates smooth integration with existing network management tools and IT expertise, reducing the need for specialized post-quantum cryptography knowledge.
Phio TX-EM supports NIST 2023 Entropy Source Validation, providing true randomness in key generation for defense-in-depth assurance. The software’s ability to function within the Cisco ecosystem, coupled with its FIPS validation, positions it as a practical solution for organizations seeking to proactively address the quantum threat. By delivering quantum-safe keys directly to network devices, Phio TX-EM enables organizations to protect their data while maintaining the flexibility to adapt to future cryptographic advancements, Cisco reports. The Marketplace listing signals to Cisco customers that Phio TX-EM is a verified option as they plan their post-quantum migrations.
Phio TX-EM is a FIPS-validated container that delivers quantum-safe keys to the network through Cisco’s SKIP API, running on Cisco platforms customers already operate, with no added hardware, no downtime, and no additional performance impact.
See today’s quantum computing news on Quantum Zeitgeist for the latest breakthroughs in qubits, hardware, algorithms, and industry deals.
