,i #aaith ,,congress #ast ,session ,h4 ,r4 #cbei ,,in ,,the ,,house ,,of ,,representatives ,may #g1 #bjbe,ms4 ,stevens 7for herself and ,ms4 ,tenney7 introduced the following bill2 which was referred to the ,committee on ,science1 ,space1 and ,technology ,a ,,bill ,to amend the ,national ,quantum ,initiative ,act and the ,cyber ,security ,research and ,development ,act to advance the rapid deployment of post quantum cybersecurity standards across the ,united ,states economy1 support ,united ,states cryptography research1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,post ,quantum ,cybersecurity ,standards ,act4 #b4 ,,nist cryptography programs and ,,nsf cryptography research 7a7 ,national ,institute of ,standards and ,technology cryptography programs ,the ,national ,quantum ,initiative ,act is amended-- 7#a7 in section #b 7#ae ,u4,s4,c4 #hhja7-- 7,a7 by redesignating paragraphs 7#d71 7#e71 7#f71 7#g71 the first paragraph 7#h7 7relating to the definition of ,subcommittee on ,economic and ,security ,implications71 and the second paragraph 7#h7 7relating to the definition of ,subcommittee on ,quantum ,information ,science7 as paragraphs 7#e71 7#g71 7#h71 7#i71 7#aa71 and 7#ab71 respectively2 7,b7 by inserting after paragraph 7#c7 the following new paragraph3 7#d7 ,critical infrastructure ,the term critical infrastructure has the meaning given such term in section #ajaf7;e7 of ,public ,law #ajg-ef 7#db ,u4,s4,c4 #eaie;c7e77 2 7,c7 by inserting after paragraph 7#e71 as so redesignated1 the following new paragraph3 7#f7 ,post-quantum cryptography ,the term post-quantum cryptography means those cryptographic algorithms or methods that are assessed not to be specifically vulnerable to attack by either a quantum computer or classical computer4 2 and 7,d7 by inserting after paragraph 7#i71 as so redesignated1 the following new paragraph3 7#aj7 ,sector risk management agency ,the term sector risk management agency has the meaning given such term in section #bbjj of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fej74 2 and 7#b7 in section #bja 7#ae ,u4,s4,c4 #hhca71 by-- 7,a7 redesignating subsection 7c7 as subsection 7d72 and 7,b7 inserting after subsection 7b7 the following new subsection3 7c7 ,post quantum cryptography deployment 7#a7 ,in general ,the ,director of the ,national ,institute of ,standards and ,technology1 in consultation with the ,secretary of ,homeland ,security and the heads of sector risk management agencies1 as appropriate1 shall promote the voluntary adoption and deployment of post-quantum cryptography standards1 including by-- 7,a7 disseminating and making publicly available guidance and resources to help organizations adopt and deploy post-quantum cryptography standards2 7,b7 providing technical assistance1 as practicable1 to entities that are high risk of quantum cryptoanalytic attacks1 such as entities determined to be critical infrastructure or digital infrastructure providers2 and 7,c7 conducting such other activities as determined necessary by the ,director to promote the adoption and deployment of post-quantum cryptography standards across the ,united ,states4 7#b7 ,grant program 7,a7 ,in general ,subject to the availability of appropriations and after the date on which the ,director of ,national ,institute of ,standards and ,technology has issued post-quantum cryptography standards under paragraph 7#a71 the ,director may establish a program to identify and provide technical assistance through the award of grants to entities that are at high risk of quantum cryptoanalytic attacks1 including by granting funds1 in adopting such post-quantum cryptographic standards and remediating quantum-related vulnerabilities4 7,b7 ,use of funds ,grants awarded to entities under this subsection may be used to cover reasonable costs1 up to a specified amount established by the ,director of the ,national ,institute of ,standards and ,technology1 of activities to adopt post-quantum cryptographic standards and remediate quantum-related vulnerabilities4 7,c7 ,guidance ,the ,director of the ,national ,institute of ,standards and ,technology may develop1 and periodically update1 guidance1 including eligibility1 application disclosure requirements1 grant amount and duration1 and any additional requirements regarding the award of grants under this paragraph4 7,d7 ,consultation ,if the program described in this paragraph is established1 the ,director of the ,national ,institute of ,standards and ,technology shall consult with the ,director of the ,cybersecurity and ,infrastructure ,security ,agency of the ,department of ,homeland ,security1 the heads of other ,sector ,specific ,agencies and risk management agencies1 and appropriate representatives of private sector entities1 including nonprofit organizations1 to share information regarding the program and guidance developed under subparagraph 7,c74 4 7b7 ,national ,science ,foundation cryptography research ,subsection 7a77#a77;,a7 of section #d of the ,cyber ,security ,research and ,development ,act 7#ae ,u4,s4,c4 #gdjc7 is amended by inserting 1 including post-quantum cryptography before the semicolon4