Quantum XChange, a provider of quantum-safe encryption solutions, announced that the SANS Institute has completed an independent evaluation of its Phio TX key distribution platform, confirming its effectiveness in preparing organizations for the post-quantum era and mitigating the “Harvest Now, Decrypt Later” (HNDL) threat.
The SANS Institute’s review specifically validated Phio TX’s out-of-band key delivery architecture, crypto-agility, and its use of ephemeral keys to achieve forward secrecy. The report emphasizes the critical need for organizations to address the quantum computing threat, particularly the HNDL attack vector, and identifies Phio TX as a solution designed to meet these challenges.
During its evaluation, the SANS Institute determined that Phio TX significantly reduces immediate risks from potential quantum attacks by transmitting encryption keys on a separate, secure channel, distinct from the data flow. This out-of-band, dual-channel approach eliminates the single point of failure inherent in traditional key exchanges, requiring an adversary to compromise two independent paths to decrypt communications, a substantially more difficult task. The platform’s use of ephemeral key technology ensures that keys are generated for single use, then immediately destroyed, providing automatic forward secrecy for every session and leaving no persistent key material for attackers to steal.
The SANS review also highlighted Phio TX’s crypto-agility, noting its ability to seamlessly swap between post-quantum encryption algorithms without downtime or impact on application performance. These features position Phio TX as a “force multiplier” for existing encryption systems, enabling organizations to enhance their current VPN/TLS networks with quantum-safe protection without requiring costly rip-and-replace upgrades. Charles Goldner, Senior Technical Engineer at SANS Institute, who led the independent review, stated, “After extensive analysis and hands-on testing, we conclude that Phio TX is a forward-looking and technically elegant solution for organizations preparing for the post-quantum era. It delivered substantial security improvements against today’s threats, like stolen keys and HNDL espionage and positions organizations to adopt tomorrow’s PQC algorithms seamlessly. Phio TX’s use of out-of-band, ephemeral keys means even advanced attackers are thwarted, no single compromised key will breach your data.”
The SANS Institute evaluation outlined several key advantages of Phio TX for enterprises and government agencies confronting quantum-induced risks. These include immediate quantum risk mitigation by neutralizing the HNDL threat through separate key transmission; crypto-agility and future-proofing, demonstrated by easy rotation between NIST-recommended post-quantum algorithms like ML-KEM, Classic McEliece, and HQC during testing without downtime; seamless integration and interoperability with existing infrastructure via its overlay architecture; scalability and performance, supported by a mesh-based key distribution “hive” for point-to-multipoint key delivery; and compliance and forward secrecy by design, aligning with emerging governmental cryptographic transition mandates.
Eddy Zervigon, CEO at Quantum XChange, commented on the validation, stating, “We are thrilled to receive this validation from the SANS Institute, which affirms the quantum-readiness of Phio TX at a critical time for cybersecurity. Global security leaders know that Q-day is approaching – waiting until quantum computers arrive is not an option when adversaries are harvesting data now. SANS’s independent review confirms that Phio TX gives organizations an immediate and practical defense against the quantum threat, all while integrating easily into their existing infrastructure.”
To further inform the community, SANS Institute and Quantum XChange plan to co-host a webinar on December 4, 2025. SANS experts will present the Phio TX test findings and offer best practices for achieving crypto-agility in the context of quantum threats. The full SANS Institute review report, titled “Quantum-Ready Security: A Phased Path Toward Key Distribution Resilience,” is publicly available.
Quantum XChange provides quantum-safe encryption solutions, with its Phio TX key management platform designed to help commercial enterprises and government agencies transition existing IT infrastructures into the post-quantum era. The platform facilitates the use of trusted standards for quantum-safe protection, crypto-agility, and the establishment of cryptographic centers of excellence without network or application downtime.
The SANS Institute is a prominent organization for cybersecurity training, certifications, and research, established in 1989. It offers hands-on courses, manages the Internet Storm Center, and conducts independent evaluations of emerging security solutions to validate technologies addressing contemporary cyber threats.
