# Public Key Infrastructure (PKI)

**R-2A activity** of project IA3 — Information Systems Security Program  
**Program element:** 0303140K — Information Systems Security Program  
**Component:** Defense-Wide · **Budget Activity:** 7  
**Vintage:** President's Budget PB2027  
**Canonical URL:** https://hitchintel.com/programs/0303140K/IA3/a2  
**Parent:** https://hitchintel.com/programs/0303140K

## Summary

This activity requests $29.8M in FY2027, 89% of project IA3, up 51% on FY2026. The R-2A exhibit describes it across FY2025–FY2027, including what the FY2027 money is planned to buy.

## What the FY2027 request buys

**FY2027 planned work.** Public Key Infrastructure: RDT&E funding will continue integration testing of key PKI Technical Capabilities as directed/mandated by the DoW CIO for continued evolution of the DoW PKI Infrastructure Cryptographic Algorithm. Additional funding will continue PKI Modernization Development, Integration, Performance. Funds will also support critical Cryptographic Modernization (Algorithm Evolution) to transition the DoW PKI to stronger cryptographic algorithms (RSA 3072/4096 and SHA-384) by the 2027 deadline, ensuring compliance with NSA standards and enhanced security. This involves building and testing the infrastructure to support these new algorithms across various environments (Development, O&M, test, and production). This will include investigating alternative PKI solutions. PKI Modernization (Hybrid Cloud Platform): RDT&E Funds will continue migration efforts and associated Test and Evaluation Efforts required to migrate the DoW PKI to a hybrid cloud environment, addressing emerging requirements (like Global Gray and SIPR mobile credentialing) and reducing operational costs. This includes testing the platform with the NSA, updating PKI policies, and migrating existing systems to the new modernized platform. The current infrastructure only supports sustainment and lacks the flexibility for modernization. DoW PKI Public Trust: RDT&E Funds will continue Sustainment of a Public Trust Certificate Authority, enabling automated issuance and renewal of publicly trusted TLS certificates for DoW and Federal Government systems. This will ensure that visitors trust the confidentiality of their communications with these systems without requiring government-specific trust chains.

**FY2026 to FY2027 change.** The increase of +$10.065 million from FY 2026 to FY 2027 is attributed to increased RDT&E requirements for continued requirements to align with the Department of War's (DoW) Strategic Objectives for modernizing its Cryptographic Infrastructure. Increase is also attributed to continued PKI Modernization Efforts that will provide a Hybrid Cloud Environment that provides automation and migrates remaining Legacy PKI Infrastructure to the Hybrid Cloud. Funding enables alignment to Commercial National Security Algorithm Suite 2.0 (CNSA 2.0) timelines and Zero Trust alignment efforts.

## Before the request year

**FY2026 plans — current year.** Public Key Infrastructure: RDT&E funding will support integration testing of key PKI Technical Capabilities as directed/mandated by the DoW CIO for continued evolution of the DoW PKI Infrastructure Cryptographic Algorithm. Additional funding will continue PKI Modernization Development, Integration, Performance. Cryptographic Modernization (Algorithm Evolution): Funding is needed to transition the DoW PKI to stronger cryptographic algorithms (RSA 3072/4096 and SHA-384) by the 2027 deadline, ensuring compliance with NSA standards and enhanced security. This involves building and testing the infrastructure to support these new algorithms across various environments (Development, O&M, test, and production).​ PKI Modernization (Hybrid Cloud Platform): RDT&E is required to migrate the DoW PKI to a hybrid cloud environment, addressing emerging requirements (like Global Gray and SIPR mobile credentialing) and reducing operational costs. This includes testing the platform with the NSA, updating PKI policies, and migrating existing systems to the new modernized platform. The current infrastructure only supports sustainment and lacks the flexibility for modernization. DoW PKI Public Trust: Funding will establish and sustain a Public Trust Certificate Authority, enabling automated issuance and renewal of publicly trusted TLS certificates for DoW and Federal Government systems. This will ensure that visitors trust the confidentiality of their communications with these systems without requiring government-specific trust chains.

**FY2025 accomplishments.** RDT&E funding for the DoD PKI directly supports the requirements/mandate from DoD CIO that the DoD PKI infrastructure Cryptographic Algorithm had to change from (RSA)-2048 to 3072- and 4098-bit algorithm by December 2027. Not only is this requirement for the entire DoD to transition to these stronger Algorithms, but the PKI PMO is responsible for creating the entire infrastructure that the DoD will leverage. This funding supports the procurement, building, testing and evaluation of the Algorithms Evolution (AE) capability for production. DISA will stand up and procure Certificate Authorities for test and evaluation on the SIPRNet to include leveraging the Online Certificate Status Protocol Capabilities and perform token testing to ensure that the DoD Tokens are interoperable with the 4K CA's.

## Funding

| Fiscal Year | Estimate Type | Amount ($M) |
|---|---|---|
| FY2025 | Actual | 6.9 |
| FY2026 | Enacted | 19.7 |
| FY2027 | Request | 29.8 |

> Prior, current and budget year only — an R-2A activity carries no five-year plan. It sums exactly into its project in the request year and not necessarily in any other.

## Other activities in project IA3

- Zero Trust Architecture (ZTA) — FY2027 2.1
- Automation Technical Integration and Engineering in Cyberspace — FY2027 1.6
- Endpoint License and Support — FY2027 0.0

## Source & machine access

- **Source:** FY2027 Office of the Secretary of Defense RDT&E Budget Justification, Exhibit R-2A, PE 0303140K project IA3 (PB PB2027). Narrative is the government's own text.
- **No marks, no contractors at this grain** — congressional marks land on the program element and R-3 performers on the project.
- **MCP:** `mcp.hitchintel.com` — `budget_get_activity`.

*HitchAI is an independent intelligence service, not affiliated with the U.S. Department of Defense. Budget figures are requests/estimates, not obligations.*