TALON2D: Tactical Autonomous Layer for Optimized Networking with Distributed and Decentralized Key Management

NUTS Technologies, an applied cryptography company, proposes leveraging its expertise in distributed, decentralized, and data-centric security solutions to evolve their existing distributed key management system (KMS) into a robust Certificate-Key Management System (CKMS) called TALON2D. The proposed solution is to address the U.S. Navy’s operational challenges and mission-critical requirements by providing a Certificate-Key Management System that is superior to commercial alternatives. TALON2D will operate in a self-contained environment and utilize a decentralized architecture, ensuring that in combat damage scenarios, TALON2D can continue to operate.TALON2D’s core innovation lies in their data-centric approach through the use of applied cryptography to create secure data objects that combine cryptographic protections with fine-grain access controls (this may include role or attribute based access control) embedded directly at the data layer. This design enforces Zero Trust principles, ensuring that only authorized entities can access specific keys or data while providing granular permissions, traceability, and resilience. The designs threat detector mitigates against Man-in-the-Middle (MITM) attacks, spoofed commands, and status message spoofing by cryptographically locking and verifying each data object for both data at rest and in transit. By automating key and certificate lifecycle management, including generation, distribution, renewal, and revocation; TALON2D reduces administrative overhead, enhances security, and increases operational efficiency. The solution aligns with the DoD Zero Trust Strategy and its Data Pillar by embedding governance, labeling, encryption, and rights management directly into its design.To address combat-damage scenarios, TALON2D’s individual nodes are designed to run autonomously by default. TALON2D’s nodes are designed to replicate and build resiliency in decentralized and distributed architecture ensuring that even if individual nodes or servers are compromised, the network continues to operate securely. Dynamic scalability with a unique cryptographic access control called “Verify-Only”, allows for the seamless addition of new nodes, such as other ships, enabling mutual support and strengthening resiliency without exposing sensitive keys or data.Phase I of this effort will demonstrate the feasibility of TALON2D through architectural diagrams, modeling, and prototype demonstrations of critical components. Key objectives include feasibility studies on its autonomous operation, resilience in combat-damaged networks, integration of PQC, and automation of cryptographic lifecycle management. TALON2D offers a transformative, secure, and scalable solution to ensure mission-critical communications remain operational and trustworthy under all conditions.