,9 ! ,s5ate ( ! ,unit$ ,/ates1 ,decemb] #h1 #bjbb4 ,am5dm5t3 ,t ! bill f ! ,h\se ( ,repres5tatives 7,h4,r4 #gece7 entitl$ ,an ,act to enc\rage ! migration ( ,f$]al ,gov]nm5t in=mation te*nology sy/ems to quantum-resi/ant cryptography1 & = o!r purposes41 d pass ) ! foll[+ ,/rike all aft] ! enact+ clause & ins]t ! foll[+3 #a4 ,%ort title ,?is ,act may be cit$ z ! ,quantum ,comput+ ,cyb]security ,prep>$ness ,act4 #b4 ,f9d+s2 s5se ( ,congress 7a7 ,f9d+s ,congress f9ds ! foll[+3 7#a7 ,cryptography is ess5tial = ! national security ( ! ,unit$ ,/ates & ! function+ ( ! economy ( ! ,unit$ ,/ates4 7#b7 ,! mo/ widespread encryption protocols today rely on computational limits ( classical comput]s to provide cyb]security4 7#c7 ,quantum comput]s might "o day h ! ability to pu% computational b\nd>ies1 all[+ u to solve problems t h be5 intractable ?us f>1 su* z integ] factorization1 :i* is important = encryption4 7#d7 ,! rapid progress ( quantum comput+ sugge/s ! pot5tial = adv]s>ies ( ! ,unit$ ,/ates to /eal s5sitive encrypt$ data today us+ classical comput]s1 & wait until suffici5tly p[]ful quantum sy/ems are available to decrypt x4 7b7 ,s5se ( ,congress ,x is ! s5se ( ,congress t-- 7#a7 a /rategy = ! migration ( in=mation te*nology ( ! ,f$]al ,gov]nm5t to po/-quantum cryptography is ne$$2 & 7#b7 ! gov]nm5twide & indu/rywide approa* to po/-quantum cryptography %\ld prioritize develop+ applications1 h>dw>e intellectual prop]ty1 & s(tw>e t c be easily updat$ to support cryptographic agility4 #c4 ,def9itions ,9 ?is ,act3 7#a7 ,ag5cy ,! t]m ag5cy-- 7,a7 means any executive dep>tm5t1 milit>y dep>tm5t1 ,gov]nm5t corporation1 ,gov]nm5t controll$ corporation1 or o!r e/abli%m5t 9 ! executive bran* ( ! ,gov]nm5t 7includ+ ! ,executive ,(fice ( ! ,presid5t71 or any indep5d5t regulatory ag5cy2 & 7,b7 does n include-- 7i7 ! ,gov]nm5t ,acc\ntability ,(fice2 or 7ii7 ! gov]nm5ts ( ! ,di/rict ( ,columbia & ( ! t]ritories & possessions ( ! ,unit$ ,/ates1 & _! v>i\s subdivisions4 7#b7 ,classical comput] ,! t]m classical comput] means a device t accepts digital data & manipulates ! in=mation bas$ on a program or sequ5ce ( in/ructions = h[ data is to be process$ & encodes in=mation 9 b9>y bits t c ei!r be #js or #as4 7#c7 ,director ( ,,cisa ,! t]m ,director ( ,,cisa means ! ,director ( ! ,cyb]security & ,infra/ructure ,security ,ag5cy4 7#d7 ,director ( ,,ni/ ,! t]m ,director ( ,,ni/ means ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology4 7#e7 ,director ( ,,omb ,! t]m ,director ( ,,omb means ! ,director ( ! ,(fice ( ,managem5t & ,budget4 7#f7 ,in=mation te*nology ,! t]m in=mation te*nology has ! mean+ giv5 ! t]m 9 section #cejb ( title #dd1 ,unit$ ,/ates ,code4 7#g7 ,national security sy/em ,! t]m national security sy/em has ! mean+ giv5 ! t]m 9 section #ceeb ( title #dd1 ,unit$ ,/ates ,code4 7#h7 ,po/-quantum cryptography ,! t]m po/-quantum cryptography means ^? cryptographic algori?ms or me?ods t are assess$ n to be specifically vuln]able to attack by ei!r a quantum comput] or classical comput]4 7#i7 ,quantum comput] ,! t]m quantum comput] means a comput] t uses ! collective prop]ties ( quantum /ates1 su* z sup]position1 int]f]5ce1 & entanglem5t1 to p]=m calculations4 #d4 ,inv5tory ( cryptographic sy/ems2 migration to po/-quantum cryptography 7a7 ,inv5tory 7#a7 ,e/abli%m5t ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 ! ,director ( ,,omb1 9 coord9ation ) ! ,national ,cyb] ,director & 9 consultation ) ! ,director ( ,,cisa1 %all issue guidance on ! migration ( in=mation te*nology to po/-quantum cryptography1 :i* %all include at a m9imum-- 7,a7 a requirem5t = ea* ag5cy to e/abli% & ma9ta9 a curr5t inv5tory ( in=mation te*nology 9 use by ! ag5cy t is vuln]able to decryption by quantum comput]s1 prioritiz$ us+ ! crit]ia describ$ 9 subp>agraph 7,b72 7,b7 crit]ia to all[ ag5cies to prioritize _! inv5tory ef=ts2 & 7,c7 a description ( ! in=mation requir$ to be report$ pursuant to subsection 7b74 7#b7 ,additional cont5t 9 guidance ,9 ! guidance e/abli%$ by p>agraph 7#a71 ! ,director ( ,,omb %all include1 9 addition to ! requirem5ts describ$ 9 t p>agraph-- 7,a7 a description ( in=mation te*nology to be prioritiz$ = migration to po/-quantum cryptography2 & 7,b7 a process = evaluat+ progress on migrat+ in=mation te*nology to po/-quantum cryptography1 :i* %all be automat$ to ! greate/ ext5t practicable4 7#c7 ,p]iodic updates ,! ,director ( ,,omb %all update ! guidance requir$ "u p>agraph 7#a7 z ! ,director ( ,,omb det]m9es necess>y1 9 coord9ation ) ! ,national ,cyb] ,director & 9 consultation ) ! ,director ( ,,cisa4 7b7 ,ag5cy reports ,n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is ,act1 & on an ongo+ basis !reaft]1 ! head ( ea* ag5cy %all provide to ! ,director ( ,,omb1 ! ,director ( ,,cisa1 & ! ,national ,cyb] ,director-- 7#a7 ! inv5tory describ$ 9 subsection 7a77#a72 & 7#b7 any o!r in=mation requir$ to be report$ "u subsection 7a77#a77;,c74 7c7 ,migration & assessm5t ,n lat] ?an #a ye> aft] ! date on :i* ! ,director ( ,,ni/ has issu$ po/-quantum cryptography /&>ds1 ! ,director ( ,,omb %all issue guidance requir+ ea* ag5cy to-- 7#a7 prioritize in=mation te*nology describ$ "u subsection 7a77#b77;,a7 = migration to po/-quantum cryptography2 & 7#b7 develop a plan to migrate in=mation te*nology ( ! ag5cy to po/-quantum cryptography consi/5t ) ! prioritization "u p>agraph 7#a74 7d7 ,int]op]ability ,! ,director ( ,,omb %all ensure t ! prioritizations made "u subsection 7c77#a7 are assess$ & coord9at$ to ensure int]op]ability4 7e7 ,(fice ( ,managem5t & ,budget reports 7#a7 ,report on po/-quantum cryptography ,n lat] ?an #ae mon?s aft] ! date ( enactm5t ( ?is ,act1 ! ,director ( ,,omb1 9 coord9ation ) ! ,national ,cyb] ,director & 9 consultation ) ! ,director ( ,,cisa1 %all submit to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate & ! ,committee on ,ov]sight & ,re=m ( ! ,h\se ( ,repres5tatives a report on ! foll[+3 7,a7 ,a /rategy to address ! risk pos$ by ! vuln]abilities ( in=mation te*nology ( ag5cies to weak5$ encryption due to ! pot5tial & possible capability ( a quantum comput] to brea* t encryption4 7,b7 ,an e/imate ( ! am\nt ( fund+ ne$$ by ag5cies to secure ! in=mation te*nology describ$ 9 subsection 7a77#a77;,a7 f ! risk pos$ by an adv]s>y ( ! ,unit$ ,/ates us+ a quantum comput] to brea* ! encryption ( ! in=mation te*nology4 7,c7 ,a description ( ,f$]al civilian executive bran* coord9ation ef=ts l$ by ! ,national ,in/itute ( ,/&>ds & ,te*nology1 includ+ timel9es1 to develop /&>ds = po/-quantum cryptography1 includ+ any ,f$]al ,in=mation ,process+ ,/&>ds develop$ "u *apt] #ce ( title #dd1 ,unit$ ,/ates ,code1 z well z /&>ds develop$ ?r\gh volunt>y1 cons5sus /&>ds bodies su* z ! ,int]national ,organization = ,/&>dization4 7#b7 ,report on migration to po/-quantum cryptography 9 in=mation te*nology ,n lat] ?an #a ye> aft] ! date on :i* ! ,director ( ,,omb issues guidance "u subsection 7c77#b71 & !reaft] until ! date t is #e ye>s aft] ! date on :i* po/-quantum cryptographic /&>ds are issu$1 ! ,director ( ,,omb1 9 coord9ation ) ! ,national ,cyb] ,director & 9 consultation ) ! ,director ( ,,cisa1 %all submit to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ( ! ,s5ate & ! ,committee on ,ov]sight & ,re=m ( ! ,h\se ( ,repres5tatives1 ) ! report submitt$ pursuant to section #ceec7;c7 ( title #dd1 ,unit$ ,/ates ,code1 a report on ! progress ( ag5cies 9 adopt+ po/-quantum cryptography /&>ds4 #e4 ,exemption ( national security sy/ems ,?is ,act %all n apply to any national security sy/em4 #f4 ,det]m9ation ( budget>y effects ,! budget>y effects ( ?is ,act1 = ! purpose ( comply+ ) ! ,/atutory ,pay-,z-,y-,g ,act ( #bjaj1 %all be det]m9$ by ref]5ce to ! late/ /atem5t titl$ ,budget>y ,effects ( ,,paygo ,legislation = ?is ,act1 submitt$ = pr9t+ 9 ! ,congressional ,record by ! ,*airman ( ! ,h\se ,budget ,committee1 provid$ t su* /atem5t has be5 submitt$ prior to ! vote on passage4 ,secret>y