Dynamic Group Keying

Request for Information (RFI) For Dynamic Group Keying This Request for Information (RFI) is in accordance with the Federal Acquisition Regulation (FAR) clause 52.215-3 (Request for Information or Solicitation for Planning Purposes - Oct 1997) and is published only to encourage interested Commercial Business parties capable of providing technical support for use by the Cryptologic Systems Division (CPSD), Cryptographic Modernization Program Office (CMPO), Lackland Air Force Base, Texas, for planning purposes only. This RFI does not constitute an invitation for bids, a request for proposal, a solicitation, a request for quote or an indication that the government will contract for the items provided by submitter. The government will not reimburse respondents for any costs associated with the preparation or submission of the information requested. CPSD CMPO requests industry provides information on available or developing capabilities for implementing Dynamic Group Keying (DGK). DGK will allow future users to cryptographically secure communications to multiple other users over tactical networks and to seamlessly change which users can be added or removed from secure communications in an ad hoc fashion. DGK seeks to overcome the following constraints: key material has to be pre-positioned, all members of the group must be known prior to group communications, key cannot be changed on the fly. DGK will provide warfighters the capability to transparently manage secure communications with tactical mission partners in real-time. Please provide response to the following: 1) Describe your company's concept of DGK including means of overcoming current constraints caused by a lack of group key capabilities. 2) Describe a roadmap and timeline to standardize DGK approaches (e.g. Elliptic Curve Diffie-Hellman, pairing based schemes, etc.) that could become NSA approved for use in cryptographic solutions for classified processing. Note: The roadmap should include NSA's collaboration on ensuring the robustness of the DGK standard and coordination through the IETF RFC process. 3) Identify and describe your company's concept of management tools and/or interfaces to handle the user's/system's decisions related to group membership/group key management. 4) Identify and describe your company's ability to prototype DGK software in existing Type 1 cryptographic devices. 5) Identify and describe your company's ability to provide software development kits for producing DGK software for embedment in existing Type 1 cryptographic devices. 6) Identify and describe your company's ability to provide a cryptographic software library for DGK and embedment documentation. 7) Identify and describe your company's ability to implement dynamic group keying software based on standards in NSA approved cryptographic solutions for classified processing. 8) Describe investment dollars required for each development/certification described in your responses for questions 1-7. 9) Describe any challenges and roadblocks to accelerate the production of DGK capabilities within the next two years. 10) Describe the percentages of investment dollars that will come from internal company research and development for questions 1-7. In addition to the above listed questions, please provide the following information: What is your CAGE code? What is your business size? If you are a Small Business, do you also qualify under any of the sub-categories: 8(a), Small Disadvantaged Business, Woman Owned Small Business, Veteran Owned Small Business, HUB Zone Small Business, Service Disabled Veteran Owned Small Business, and HBCU/MI? For small business consideration, would your firm be able to compete under NAICS 334111, 334210, 334220, 334290, 334419, 334511, 517919, or 561621? If not, why not? Are you on one or more GSA schedules? If so, which one(s)? Please limit responses to no more than 5 pages technical plus 1 page company background, excluding answers to the CAGE, size, and small business questions above. Vendors who submit information for review do so with the understanding that U.S. Government personnel as well as their support contractors will review their material and data. Respondents will not be contacted regarding their submission or information gathered as a result of this notice nor the outcome of the Government's review of the solicited information unless the Government desires further information. Submitted information packages will be retained by the Government and not returned to the contractor. All interested, capable and responsible sources that wish to respond to this RFI are required to electronically supply their responses (.doc or.pdf format) in the order and format in which they are presented, to latoya.siples.1@us.af.mil and mark.delarosa@us.af.mil no later than 1600 hrs CT, 30 April 2012. Telephonic responses will not be accepted. Electronic Media can be mailed to: ESC/HNCKA Contracting Division (Attn: Mr. Mark Delarosa) 230 Hall Blvd. Suite 114 San Antonio, Texas 78243-7007 In addition, if you have any specific questions (relating to the above referenced questions only) please submit them in written format to the Contracting Officer listed above. Responses to this RFI will not be returned.