Modular and Adaptable Enterprise Inline Media Encryptor

Request for Information (RFI) Modular and Adaptable Inline Media Encryptor for Classified Data at Rest This Request for Information (RFI) is in accordance with Federal Acquisition Regulation (FAR) clause 52.215-3 (Request for Information or Solicitation for Planning Purposes - Oct 1997) and is published only to obtain information for use by the Air Force Cryptologic and Cyber Systems Division (CCSD), Joint Base San Antonio-Lackland, Texas, for market research and planning purposes only. This RFI is NOT a Request for Proposal, Invitation for Bid, or announcement of a solicitation. It is intended for information or planning purposes only. There is no bid package or solicitation document associated with this announcement. Response to this RFI is strictly voluntary and will not affect any potential offeror's ability to submit an offer if a solicitation is released. Any requests for a solicitation package will be disregarded. The Government does not intend to award a contract on the basis of this RFI or otherwise pay for the information solicited. No entitlement to payment of direct or indirect costs or charges by the Government will arise as a result of preparing submissions in response to this RFI and the Government's use of such information. Respondents of this RFI may be requested to provide additional information/details based on their initial submittals. The Government is seeking comment from Industry partners regarding a concept for an inline media encryptor (IME) for Classified Data at Rest (CDAR). Needs have emerged in the areas of tactical equipment, manned and unmanned equipment, individual workstations, arrays of disks and mass storage to high speed media. The Government wants to look at the feasibility of a single solution that will solve all of these diverse needs. Clearly, there are trade-offs that need to be made concerning speed of operation/transfer; size of disks supported; disk drive interfaces supported; and Cost, Size, Weight and Power (CSWaP) considerations. There are several challenges in developing an IME for CDAR to include: (1) high speed disk encryption/decryption performance; (2) small Size, Weight and Power (SWaP) constrained form factor that supports manned and unmanned operations; and (3) interoperability on multiple platforms. One of the biggest challenges is the variety of physical interface connectors and software protocols used by the different host computer systems and storage devices that a CDAR product may need to support. Interfaces include but are not limited to protocols/connectors such as Non-Volatile Memory express (NVMe), multiple Serial Advanced Technology Attachment (SATA) and variants, Small Computer System Interface (SCSI), Serial Attached SCSI (SAS), Universal Serial Bus (USB) types, Peripheral Component Interconnect Express (PCIe), Infiniband, VMEbus/VPX, etc. As a possible approach to addressing these challenges, the Government is investigating the concept of an IME for CDAR that can perform extremely high-speed disk encryption in an architecture that allows for low-cost customization and protocol conversion adapters to meet the needs of the most demanding and varied users. Essentially, the conceptual CDAR IME would consist of a single NSA certified Type-1 high assurance encryptor with interface adapters located outside the certification boundary. The goal would be to have the crypto core plus the interface adapters for the required disk fit within a reasonably small footprint. The concept is shown graphically below. Figure 1 Concept Characteristics: A. Hardware agility - can interface electrically with a variety of existing/future products (hardware configuration can be programmable and is not likely to be changed often) B. Interface type flexibility - can support a variety of existing/future protocols (while multiple interfaces/protocols must be addressed, once set up, the interface will not be changed often, i.e., fast switching between them is not needed) C. Standards-based architecture D. Support Suite A and Suite B algorithms E. NSA Type 1 Certified for Top Secret and Below (TSAB) F. Compliant with NSA/CSS Policy 3-9 G. High throughput performance to support several generations of storage media H. Capable of writing/reading encrypted data to/from various storage media configurations to include single/multiple directly attached storage (DAS), network attached storage (NAS), storage area network (SAN), and Redundant Array of Independent Disks (RAID) I. Capable of multiple keying modes; pre-placed key, self-generated key, and others J. Multiple modes of zeroization (Remote, Event Based, On-Demand) K. Low size, weight and power (SWaP) L. Operate in airborne and/or ground environments CCSD is seeking industry comments for the concept shown above in Figure 1. 1. Is the concept of a single IME to meet the variety of needs envisioned possible? a. If so, what kinds of tradeoffs will need to be made to achieve this solution, e.g., size would have to be large enough to accommodate several types of interfaces, or a separate power supply would be needed, etc? b. If not, what would be the limiting factor(s)? c. If not, what is the best approach, e.g., multiple products in multiple form factors, multiple products in the same form factor, one encryptor/decryptor with "snap on" interface adaptors, etc? 2. Can the CDAR concept be realistically achieved using current integrated circuit technology (FPGAs, ASIC, etc.)? 3. What problems, if any, do you see with the concept? 4. Please comment on the notion of certifying the cryptographic core only with the interface adapters outside of the certification boundary? 5. Can protocol/interface adapters be achieved for interoperability of all connecter types? Please comment on the versatility of each of the following: a. Non-Volatile Memory express (NVMe), b. Serial AT Attachment (SATA) and variants, c. Small Computer System Interface (SCSI), d. Serial Attached SCSI (SAS), e. Universal Serial Bus (USB) and variants, f. Peripheral Component Interconnect Express (PCIe), g. Infiniband, VMEbus/VPX, etc. 6. Will some of these protocols/interfaces be obsolete/minimally used in the near future (3 - 5 years)? a. If so, which ones are likely to fall in that category? 7. Is there a consolidation of storage media interfaces on the horizon? a. If so, which one(s) are most likely to become the de facto standard(s)? 8. Can a single unit be created to host various storage media configurations to include single/multiple directly attached storage (DAS), network attached storage (NAS), storage area network (SAN), and Redundant Array of Independent Disks (RAID)? Please comment on the achievability for each of the following: a. Direct Hard Disk and Solid State Drives b. Network Attached Storage c. Storage Area Network d. Redundant Array of Independent Disks 9. What is the smallest footprint achievable? Please provide a range for each compared to cost for the following: a. Size b. Weight c. Power 10. Is it possible to create a CDAR device that is Operating System (OS) agnostic and able to work in a plug and play manner? Moreover, is it possible to achieve plug and play feature on a Real Time OS? 11. Is it necessary to create hardware CDAR device driver for each use case scenario? In addition to the above listed questions, please provide the following business information: 12. Please provide your cage code and business size. Submissions shall not exceed twenty-five (25) 8.5 X 11 inch, single-sided pages. Contractors who submit information for review do so with the understanding that U.S. Government personnel as well as their support contractors will review their material and data. Respondents will not be contacted regarding their submission or information gathered as a result of this notice nor the outcome of the Government's review of the solicited information unless the Government desires further information. Submitted information packages will be retained by the Government and not returned to the contractor. All interested, capable and responsible sources that wish to respond to this RFI are required to electronically supply their responses (.doc or .pdf format) in the order and format in which they are presented, to ivy.furnace@us.af.mil and alfie.ritchey@us.af.mil, no later than 0900 hrs CDT, 27 November 2017. "CDAR RFI #2 Response" must be included in the subject line. Telephonic responses will not be accepted. Electronic media can be mailed to: Cryptologic Systems Division Contracting Division/AFLCMC/HNCKA (Attn: Ivy Furnace) 230 Hall Blvd. Suite 205, Bldg 2061 San Antonio, Texas 78243-7081