,,ii ,cal5d> ,no4 #fce #aag? ,,congress 
#b;d ,session  ,s4 #deib ,report ,no4   
#aag-bea ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$
 ,,/ates  ,july #ba1 #bjbb,ms4 ,hassan  
7= h]self1 ,mr4 ,portman1 ,ms4 ,ros51   
,mr4 ,tillis1 ,mr4 ,"y1 & ,mr4 ,he9ri*7 
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
  ,decemb] #ac1 #bjbb,report$ by ,mr4   
,pet]s1 ) an amendment,insert ! "p pr9t$
 9 italic  ,a ,,bill  ,to enc\rage !    
migration ( ,f$]al ,gov]nm5t in=mation  
te*nology sy/ems to quantum-resi/ant    
cryptography1 & = o!r purposes4  #a4    
,%ort title ,?is ,act may be cit$ z !   
,quantum ,comput+ ,cyb]security         
,prep>$ness ,act4  #b4 ,f9d+s2 s5se (   
,congress  7a7 ,f9d+s ,congress f9ds !  
foll[+3 7#a7 ,cryptography is ess5tial =
 ! national security ( ! ,unit$ ,/ates &
 ! function+ ( ! economy ( ! ,unit$     
,/ates4  7#b7 ,! mo/ widespread         
encryption protocols today rely on      
computational limits ( classical        

comput]s to provide cyb]security4  7#c7 
,quantum comput]s might "o day h !      
ability to pu% computational b\nd>ies1  
all[+ u to solve problems t h be5       
intractable ?us f>1 su* z integ]        
factorization1 :i* is important =       
encryption4  7#d7 ,! rapid progress (   
quantum comput+ sugge/s ! pot5tial =    
adv]s>ies ( ! ,unit$ ,/ates to /eal     
s5sitive encrypt$ data today us+        
classical comput]s1 & wait until        
suffici5tly p[]ful quantum sy/ems are   
available to decrypt x4  7b7 ,s5se (    
,congress ,x is ! s5se ( ,congress t--  
7#a7 a /rategy = ! migration ( in=mation
 te*nology sy/ems ( ! ,f$]al ,gov]nm5t  
to po/-quantum cryptography is ne$$2 &  
7#b7 ! gov]nm5twide & indu/rywide       
approa* to po/-quantum cryptography %\ld
 prioritize develop+ applications1      
h>dw>e intellectual prop]ty1 & s(tw>e t 
c be easily updat$ to support           
cryptographic agility4  #c4 ,def9itions 
,9 ?is ,act3 7#a7 ,classical comput] ,! 
t]m classical comput] means a device t  

accepts digital data & manipulates !    
in=mation bas$ on a program or sequ5ce (
 in/ructions = h[ data is to be process$
 & encodes in=mation 9 b9>y bits t c    
ei!r be #js or #as4  7#b7 ,director (   
,,cisa ,! t]m ,director ( ,,cisa means !
 ,director ( ! ,cyb]security &          
,infra/ructure ,security ,ag5cy4  7#c7  
,director ( ,,ni/ ,! t]m ,director (    
,,ni/ means ! ,director ( ! ,national   
,in/itute ( ,/&>ds & ,te*nology4  7#d7  
,director ( ,,omb ,! t]m ,director (    
,,omb means ! ,director ( ! ,(fice (    
,managem5t & ,budget4  7#e7 ,executive  
ag5cy ,! t]m executive ag5cy has ! mean+
 giv5 ! t]m ,executive ag5cy 9 section  
#aje ( title #e1 ,unit$ ,/ates ,code4   
7#f7 ,in=mation te*nology ,! t]m        
in=mation te*nology has ! mean+ giv5 !  
t]m 9 section #cejb ( title #dd1 ,unit$ 
,/ates ,code4  7#g7 ,po/-quantum        
cryptography ,! t]m po/-quantum         
cryptography means a cryptographic sy/em
 t-- 7,a7 is secure aga9/ decryption    
attempts us+ a quantum comput] or       

classical comput]2 &  7,b7 c int]op]ate 
) exi/+ communications protocols &      
networks4  7#h7 ,quantum comput] ,! t]m 
quantum comput] means a comput] t uses !
 collective prop]ties ( quantum /ates to
 p]=m calculations4  #d4 ,inv5tory (    
cryptographic sy/ems2 migration to      
po/-quantum cryptography  7a7 ,inv5tory 
7#a7 ,e/abli%m5t ,n lat] ?an #ahj days  
aft] ! date ( enactm5t ( ?is ,act1 !    
,director ( ,,omb %all e/abli%1 by rule 
or b9d+ guidance1 a requirem5t = ea*    
executive ag5cy to e/abli% & ma9ta9 an  
inv5tory ( ea* cryptographic sy/em 9 use
 by ! ag5cy4  7#b7 ,additional cont5t 9 
rule or b9d+ guidance ,9 ! rule or b9d+ 
guidance e/abli%$ by p>agraph 7#a71 !   
,director ( ,,omb %all include1 9       
addition to ! requirem5t describ$ "u t  
p>agraph-- 7,a7 a description (         
in=mation te*nology to be prioritiz$ =  
migration to po/-quantum cryptography2  
7,b7 a description ( ! in=mation requir$
 to be report$ pursuant to subsection   
7b72 &  7,c7 a process = evaluat+       

progress on migrat+ in=mation te*nology 
to po/-quantum cryptography1 :i* %all be
 automat$ to ! greate/ ext5t            
practicable4  7#c7 ,p]iodic updates ,!  
,director ( ,,omb %all update ! rule or 
b9d+ guidance e/abli%$ by p>agraph 7#a7 
z ! ,director det]m9es necess>y4  7b7   
,ag5cy reports ,n lat] ?an #a ye> aft] !
 date ( enactm5t ( ?is ,act1 & on an    
ongo+ basis !reaft]1 ! head ( ea*       
executive ag5cy %all provide to !       
,director ( ,,omb1 ! ,director ( ,,cisa1
 & ! ,national ,cyb] ,director an       
inv5tory ( all in=mation te*nology 9 use
 by ! executive ag5cy t is vuln]able to 
decryption by quantum comput]s1         
prioritiz$ pursuant to ! guidance issu$ 
"u subsection 7a77#b74  7c7 ,migration &
 assessm5t  7#a7 ,migration to          
po/-quantum cryptography ,n lat] ?an #a 
ye> aft] ! date on :i* ! ,director (    
,,ni/ has issu$ po/-quantum cryptography
 /&>ds1 ! ,director ( ,,omb %all issue  
guidance requir+ ea* executive ag5cy to 
develop a plan to migrate in=mation     

te*nology ( ! ag5cy to po/-quantum      
cryptography4  7#b7 ,designation (      
sy/ems = migration ,n lat] ?an #ij days 
aft] ! date on :i* ! guidance requir$ by
 p>agraph 7#a7 has be5 issu$1 !         
,director ( ,,omb %all issue guidance = 
executive ag5cies to-- 7,a7 designate   
in=mation te*nology to be migrat$ to    
po/-quantum cryptography2 &  7,b7       
prioritize in=mation te*nology designat$
 "u subp>agraph 7,a71 on ! basis ( !    
am\nt ( risk pos$ by decryption by      
quantum comput]s to t te*nology1 =      
migration to po/-quantum cryptography4  
7d7 ,int]op]ability ,! ,director ( ,,omb
 %all ensure t ! designations &         
prioritizations made "u subsection      
7c77#b7 are assess$ & coord9at$ to      
ensure int]op]ability4  7e7 ,report on  
po/-,quantum cryptography ,n lat] ?an   
#ae mon?s aft] ! date ( enactm5t ( ?is  
,act1 ! ,director ( ,,omb %all submit to
 ,congress a report on ! foll[+3 7#a7 ,a
 /rategy to address ! risk pos$ by !    
vuln]abilities ( in=mation te*nology    

sy/ems ( executive ag5cies to weak5$    
encryption due to ! pot5tial & possible 
capability ( a quantum comput] to brea* 
t encryption4  7#b7 ,! am\nt ( fund+    
ne$$ by executive ag5cies to secure !   
in=mation te*nology sy/ems describ$ 9   
p>agraph 7#a7 f ! risk pos$ by an       
adv]s>y ( ! ,unit$ ,/ates us+ a quantum 
comput] to brea* ! encryption (         
in=mation te*nology sy/ems4  7#c7 ,a    
description ( ,f$]al civilian executive 
bran* coord9ation ef=ts l$ by !         
,national ,in/itute ( ,/&>ds &          
,te*nology1 includ+ timel9es1 to develop
 /&>ds = po/-quantum cryptography1      
includ+ any ,f$]al ,in=mation ,process+ 
,/&>ds develop$ "u *apt] #ce ( title    
#dd1 ,unit$ ,/ates ,code1 z well z /&>ds
 develop$ ?r\gh volunt>y1 cons5sus /&>ds
 bodies su* z ! ,int]national           
,organization = ,/&>dization4  7f7      
,report on migration to po/-,quantum    
cryptography 9 in=mation te*nology      
sy/ems ,n lat] ?an #a ye> aft] ! date on
 :i* ! ,director ( ,,omb issues guidance

 "u subsection 7c77#b71 & annually      
!reaft] until ! date t is #e ye>s aft] !
 date on :i* po/-quantum cryptographic  
/&>ds are issu$1 ! ,director ( ,,omb    
%all submit to ,congress1 ) ! report    
submitt$ pursuant to section #ceec7;c7 (
 title #dd1 ,unit$ ,/ates ,code1 a      
report on ! progress ( executive ag5cies
 9 adopt+ po/-quantum cryptography      
/&>ds4  #e4 ,det]m9ation ( budget>y     
effects ,! budget>y effects ( ?is ,act1 
= ! purpose ( comply+ ) ! ,/atutory     
,pay-,z-,y-,g ,act ( #bjaj1 %all be     
det]m9$ by ref]5ce to ! late/ /atem5t   
titl$ ,budget>y ,effects ( ,,paygo      
,legislation = ?is ,act1 submitt$ =     
pr9t+ 9 ! ,congressional ,record by !   
,*airman ( ! ,h\se ,budget ,committee1  
provid$ t su* /atem5t has be5 submitt$  
prior to ! vote on passage4  ,decemb]   
#ac1 #bjbb,report$ ) an am5dm5t