Information Systems Security Program

Mission — Cryptographic Modernization source

The DAF Cryptographic Modernization (CM) effort modernizes cryptographic devices protecting critical national security information across multi-domain operations. This DAF effort supports an integrated effort across the cyber domain to transform to next-generation cryptographic capabilities. It provides U.S. forces and multinational and interagency partners the multi-domain security needed to protect the flow and exchange of strategic, operational, and tactical information in accordance with national and international policy/standards, and the validated requirements of decision makers, warfighters, and the intelligence community. The AF Cryptographic Modernization 2 (CM2) effort is required by Chairman Joint Chiefs of Staff Notice (CJCSN) 6510 and NSA Decertification Messages (CED-31-15/037-21/032-16) for the need to add quantum resistance to the existing high assurance cryptographic products. This effort will allow protection against advanced & evolving quantum computing threats. All existing crypto devices will be vulnerable and must be modernized to be quantum resilient. The majority of the development effort includes hardware changes to the existing crypto devices. The CM effort is a holistic DAF-wide "modern” cryptographic strategy to provide long-term, evolving protection of NC3, ISR, PKI, KME, and nearly all AF platforms and ground networks. CM will provide the required enhanced security for all DAF voice, data, and video capabilities on the battlefield and throughout the DoD enterprise and will enable the integration of new capabilities to DAF users through development of a new DoD CM2 Initial Capabilities Document (ICD) dated 15 July 2021. This program element may include necessary civilian pay expenses required to manage, execute, and deliver weapon system capability. The use of such programs funds would be in addition to the civilian pay expenses budgeted in program element 0605829F, 0605831F, 0605833F, or 0605898F. In FY 2024 2.074M was expended for civilian pay expenses in this program element, and in FY 2025 3.894M is forecasted for civilian pay expenses in this program element.

Mission — Information Systems Security Program source

Information Systems Security Program (ISSP) - Includes resources, manpower authorizations, necessary facilities and equipment required to develop, deliver, and sustain Cryptographic Modernization (CM) capabilities to nearly all Department of the Air Force (DAF) weapon systems that encrypt/decrypt sensitive information. CM ensures confidentiality, integrity, and availability of the information and the systems. The CM work done in the Information Systems Security Program (ISSP) ensures that DAF systems receive cryptographic capabilities that are compliant with National Security Agency (NSA) mandates and that commanders can confidently leverage for Joint All Domain Command and Control (JADC2) capabilities. The ISSP Element and associated CM activities provide a foundational Communications Security (COMSEC) capability that is the first and last line of cyber defense against adversary exploitation. The DAF and the DoD require the capability to securely collect, process, store, and disseminate an uninterrupted flow of information, while denying an adversary the ability to intercept, collect, destroy, interpret, or manipulate our information flows. CM provides secure communication to allow the DoD to achieve and maintain decision superiority, the key to successful application of the military instrument of national power in modern full-spectrum operations. DAF COMSEC equipment protects sensitive information such as warfighter positions, mission planning, target strikes, commanders' orders, intelligence, force strength, and force readiness. When an adversary is capable of interpretation, manipulation, or destruction of the information used by the warfighter, DoD military forces will suffer significant and/or devastating mission degradation that can result in loss of life and resources and/or exceptionally grave damage to national security. The advanced threats and capabilities of near-peer adversaries will necessitate the exclusion of weapon systems with obsolete cryptography from Combatant Commander Areas of Responsibility (AORs)—diminishing the ability of the DAF to communicate securely in a high-end fight. The 2021 National Defense Authorization Act (NDAA) mandates the services begin reporting on their CM activities and status of obsolete products starting in Jan 2022, as well as the National Security Memorandum 10 (4 May 2022) which identifies the need for quantum-resistant crypto. These documents highlight the high importance of ISSP efforts. The overall focus of the Research, Development, Test, and Evaluation (RDT&E) efforts within the ISSP program is to transform current CM devices to protect against current technology threats, which include quantum computing. The modernization effort is required by Chairman Joint Chiefs of Staff Notice (CJCSN) 6510 and NSA Decertification Messages (CED-31-15/037-21/032-16) from FY23 for the need to add Quantum Resilience (QR) to the existing high assurance cryptographic products. This effort will allow protection against advanced & evolving quantum computing threats. All existing crypto devices will be vulnerable and must be modernized to be quantum resilient. These efforts are driven by the NSA requirements to implement newly developed Quantum Resistant Algorithms (QRAs). The NSA requires an inventory of cryptographic devices that are more resilient to future threats through full software re-programmability. This will enable protection against near peer adversary exploitation and provide the ability to rapidly adapt against newer threats. This program element may include necessary civilian pay expenses required to manage, execute, and deliver weapon system capability. The use of such program's funds would be in addition to the civilian pay expenses budgeted in program element 0605829F, 0605831F, 0605833F, or 0605898F. In FY 2024 2.074M was expended for civilian pay expenses in this program element, and in FY 2025 3.894M is forecasted for civilian pay expenses in this program element. This program is in Budget Activity 7, Operational System Development because this budget activity includes development efforts to upgrade systems that have been fielded or have received approval for full rate production and anticipate production funding in the current or subsequent fiscal year.

Mission — Cryptographic Modernization 2 (CM2) source

The Department of the Air Force (DAF) Cryptographic Modernization 2 (CM2) effort modernizes cryptographic devices protecting critical national security information across multi-domain operations. This DAF effort supports an integrated effort across the cyber domain to transform to next-generation cryptographic capabilities. It provides U.S. forces and multinational and interagency partners the multi-domain security needed to protect the flow and exchange of strategic, operational, and tactical information in accordance with national and international policy/standards, and the validated requirements of decision makers, warfighters, and the intelligence community. CM2 modernization is required by Chairman Joint Chiefs of Staff Notice (CJCSN) 6510 and National Security Agency (NSA) Decertification Messages (CED-31-15/037-21/032-16) from FY23 for the need to add Quantum Resilience (QR) to the existing high assurance cryptographic products. This effort will allow protection against advanced & evolving quantum computing threats. All existing crypto devices will be vulnerable and must be modernized to be quantum resilient. The CM2 effort is a holistic Air Force wide "modern” cryptographic strategy to provide long-term, evolving protection of Nuclear Command, Control, and Communications (NC3), Intelligence, Surveillance, Reconnaissance (ISR), Public Key Infrastructure (PKI), Key Management Enterprise (KME), and nearly all DAF platforms, ground and space networks. CM2 will provide the required enhanced security for all DAF voice, data, and video capabilities on the battlefield and throughout the DoD enterprise. In addition to the development /modernization of the devices, this effort requires studies, proof of concepts, and prototype efforts to accurately address the evolving quantum computing threats in the years to come and ramp up efforts accordingly. This program element may include necessary civilian pay expenses required to manage, execute, and deliver weapon system capability. The use of such program's funds would be in addition to the civilian pay expenses budgeted in program element 0605829F, 0605831F, 0605833F, or 0605898F. In FY 2024 2.074M was expended for civilian pay expenses in this program element, and in FY 2025 3.894M is forecasted for civilian pay expenses in this program element.

Accomplishments & Planned Programs (13)