>_ Skip to main content
Menu
Search
Post-Quantum Security

Quantum XChange, Carahsoft Bring Phio TX to U.S. Government

Quantum XChange, Carahsoft Bring Phio TX to U.S. Government


Quantum XChange and Carahsoft Technology have partnered to make Quantum XChange’s Phio TX cryptographic management platform available to U.S. public-sector buyers. Announced on September 22, this distribution agreement designates Carahsoft as Quantum XChange’s Master Government Aggregator.

Carahsoft will sell Phio TX through its reseller network and various purchasing cooperatives. This strategic move is significant because it channels federal post-quantum migration efforts through a distributor with extensive reach in government IT procurement, aligning with upcoming mandated agency deadlines.

Agreement Details

Carahsoft will resell Phio TX through The Interlocal Purchasing System (TIPS), OMNIA Partners, and The Quilt, with specific contract vehicles detailed in the official release. The Phio TX platform is the confirmed product under this agreement.

Phio TX centralizes the management of multiple key sources under a single policy layer, supporting post-quantum cryptography, quantum key distribution, and classical encryption. The companies state that Phio TX holds FIPS 140-3 module validation and FIPS 203 validation. Its out-of-band design separates key delivery from data transmission, a feature Quantum XChange claims mitigates “Harvest Now, Decrypt Later” attacks. According to Quantum XChange, agencies can switch cryptographic methods without downtime or application rewrites.

“Post-quantum cryptography is not a math problem, it’s an architecture problem,” said Eddy Zervigon, CEO of Quantum XChange, in the release.

Relevant Standards

This federal initiative is driven by NIST’s finalized algorithms. FIPS 203, also known as ML-KEM, addresses key establishment, which Quantum XChange confirms Phio TX has validated. FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA) pertain to digital signatures.

It’s important to distinguish between the validations: FIPS 140-3 certifies the cryptographic module itself, which is separate from entropy-source or QRNG validation, though the two firms discuss these together under the crypto-agility framework. Only module validation and FIPS 203 support are confirmed for Phio TX.

This partnership aligns with Executive Order 14412 and OMB Memorandum M-26-15, both of which outline expectations for migration. It is part of broader public-sector PQC activities, including the WISeKey, SEALSQ, and Canton of Jura MoU in Switzerland. Competitors like Arqit are also pursuing similar government demand. Quantum XChange’s listing on Carahsoft is available here.

Read more