Phio TX-EM Datasheet

Overview

Phio TX® is a key management system that strengthens your encryption, protects data, and helps you implement the latest Post-Quantum Cryptography (PQC) standards for quantum-safe networking. Securing on-premises, hybrid, and cloud networks, the Phio TX® modular architecture enables a seamless integration into existing network infrastructures with minimal disruption to ongoing operations. There is no network performance degradation and no downtime due to cryptography upgrades.

Phio TX® supports standard key management protocols, such as SKIP and ETSI*, enabling drop-in integration without changes to existing router configurations. Phio TX® is available in multiple form factors, including a container version integrated with Cisco networking, secure hardware, and virtualized software appliances.

Phio TX® is the industry’s first NIST-validated FIPS 203 end-to-end PQC solution, enabling Quantum-safe MACsec and IPsec virtual private networks (VPNs).¹ All versions of the FIPS 203 ML-KEM algorithm are supported. Phio TX® is also one of the first products to receive NIST validation for the latest FIPS 140-3 cryptographic module standard.²

Cisco Router Native Integration

The Phio TX virtualized container application (Phio TX-EM) hardens SKIP-enabled Cisco networking infrastructure by making classic encryption quantum safe and enables smoother migration to post quantum cryptography. Integrated with Cisco IOS XE and XR routers supporting SKIP and 3^rd party containers such as the Cisco Catalyst 8000v, Phio TX-EM consistently supports the network topologies and operating scenarios of the other Phio TX form factors but has the added benefit of over-the-network provisioning, installation, configuration and distribution of Phio TX key management as an integrated process within the network itself. Furthermore, Phio TX-EM keeps SKIP key requests within the cryptographic boundary of the Cisco appliance, making this the most secure SKIP PQC implementation available. This eliminates the possibility of data leakage due to weakly configured and potentially vulnerable external SKIP calls