Carahsoft Technology Corp., the Trusted Government IT Solutions Provider®, is now RJ Lee Group’s Master Government Aggregator®. Through Carahsoft’s reseller partners and NASA SEWP V and E&I Cooperative Services contracts, Federal, State, and Local agencies can now purchase our post-quantum data protection and phishing-resistant, passwordless authentication.
Read the full announcement
Why this matters now
Federal mandates, from the Department of War (DoW) Zero Trust Strategy to OMB M-22-09 and OMB M-26-15, require agencies to adopt phishing-resistant authentication and post-quantum cryptography on aggressive timelines.
This urgency stems from the “harvest now, decrypt later” threat. Adversaries may collect encrypted data now and wait until quantum computers can break the encryption. Data requiring long-term protection is already at risk.
“Carahsoft’s proven contract vehicles and reseller ecosystem provide Federal, State, and Local agencies with a streamlined path to deploy these protections now, before the harvest-now, decrypt-later threat matures,” said Scott Monfredo, Vice President of Government Programs at RJ Lee Group.
What agencies can now buy
Greenlight: passwordless, phishing-resistant sign-in
- Image-based authentication. The primary sign-in uses no password, one-time code, or push approval that an attacker can steal or replay.
- Works offline. Authentication completes on the device, so users can sign in even in denied, disconnected, intermittent, and low-bandwidth (DDIL) environments.
- Built for hard-to-credential users. Designed for people for whom PIV/CAC issuance is impractical, including mission partners, new accessions, and credential recovery.
- Fits existing identity systems. Integrates with Microsoft Entra ID and CAC/PIV.
Quantum Shroud: post-quantum protection for data in motion
- NIST-standardized post-quantum cryptography at its core: ML-KEM-1024 key establishment and ML-DSA-87 signatures implementing FIPS 203 and FIPS 204, the same algorithms and parameter strength specified in NSA’s CNSA 2.0 suite.
- Classical defense in depth: AES-256-GCM authenticated encryption, so no single cryptographic break, classical or quantum, exposes traffic.
- Less to learn from traffic: built-in traffic obfuscation, cryptographic sequencing, and adaptive timing reduce what an adversary can learn from traffic patterns.
- No changes to existing applications: deploys as a software overlay at enclave and site boundaries.
Quantum Guard: post-quantum protection for data on the device
- Extends the same NIST-standardized post-quantum encryption to data stored on the device.
Together, these solutions offer agencies a practical, standards-based path to Zero Trust and alignment with CNSA 2.0 timelines.
How to buy
- NASA SEWP V: contracts NNG15SC03B and NNG15SC27B
- E&I Cooperative Services: Contract #EI00063~2021MA
- Carahsoft’s RJ Lee Group team: (703) 230-7597 or RJLeeGroup@carahsoft.com
Why a science company builds security software
For four decades, regulators, courts, and government agencies have relied on RJ Lee Group’s scientific findings because our evidence withstands scrutiny. Our security products meet the same standard: data remains protected, and integrity is demonstrable. We develop and support all products in the United States.
Learn more