,,ii #aai? ,,congress #a/ ,session ,s4 #beeh ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,july #cj1 #bjbe ,mr4 ,pet]s 7= himself & ,mrs4 ,blackburn7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,homel& ,security & ,gov]nm5tal ,affairs ,a ,,bill ,to require ! ,subcommittee on ! ,economic & ,security ,implications ( ,quantum ,in=mation ,sci5ce to assess possible migration by ,f$]al ag5cies to po/-quantum cryptography1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,! ,national ,quantum ,cyb]security ,migration ,/rategy ,act ( #bjbe44 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,cryptography ,! t]m cryptography has ! mean+ giv5 su* t]m 9 ! ,national ,in/itute ( ,/&>ds & ,te*nology ,special ,publication #ahjj-ba;,b 7relat+ to mobile device security7 & ! ,national ,in/itute ( ,/&>ds & ,te*nology ,special ,publication #hjj-ei 7relat+ to guidel9es = id5tify+ an in=mation sy/em z a national security sy/em74 7#b7 ,classical comput] ,! t]m classical comput] means a device t accepts digital data & manipulates ! data bas$ on a program or sequ5ce ( in/ructions = h[ su* data is to be process$1 & t encodes in=mation 9 b9>y4 7#c7 ,quantum comput] ,! t]m quantum comput] means a comput] t uses ! collective prop]ties ( quantum /ates1 su* z sup]position1 int]f]5ce1 & entanglem5t1 to p]=m calculations4 7#d7 ,po/-,quantum ,cryptography ,! t]m po/-quantum cryptography means cryptographic algori?ms or me?ods t are n specifically vuln]able to attacks by ei!r a quantum comput] or classical comput]4 7#e7 ,critical ,infra/ructure ,! t]m critical infra/ructure has ! mean+ giv5 t t]m 9 section #ajaf7;e7 ( ! ,critical ,infra/ructures ,protection ,act ( #bjja 7#db ,u4,s4,c4 #eaie;c7e774 7#f7 ,high-impact sy/em ,! t]m high-impact sy/em means a ,f$]al in=mation sy/em t holds s5sitive in=mation1 ! loss ( :i* w\ld be categoriz$ z high impact "u ,f$]al ,in=mation ,process+ ,/&>ds ,publication #aii 7relat+ to /&>ds = security categorization ( ,f$]al in=mation & in=mation sy/ems71 z 9 effect on ! day be=e ! date ( ! enactm5t ( ?is ,act4 7#g7 ,sector risk managem5t ag5cy ,! t]m sector risk managem5t ag5cy has ! mean+ giv5 ! t]m 9 section #bbjj ( ! ,homel& ,security ,act ( #bjjb 7#f ,u4,s4,c4 #fej74 #c4 ,/rategy = ,f$]al ag5cy migration to po/-quantum cryptography 7a7 ,duties ( ,subcommittee on ! ,economic & ,security ,implications ( ,quantum ,in=mation ,sci5ce ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,subcommittee on ! ,economic & ,security ,implications ( ,quantum ,in=mation ,sci5ce1 z e/abli%$ by section #aje ( ! ,national ,quantum ,initiative ,act 7#ae ,u4,s4,c4 #hhad;a71 9 coord9ation ) ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology & 9 consultation ) ! ,quantum ,economic ,developm5t ,consortium1 %all develop a ,national ,quantum ,cyb]security ,migration ,/rategy t includes ! foll[+3 7#a7 ,a def9ition ( a cryptographically relevant quantum comput]4 7#b7 ,recomm5d$ /&>ds = ,f$]al ag5cies to apply to det]m9e :e!r a quantum comput] meets su* def9ition1 includ+-- 7,a7 ! *>act]i/ics ( su* comput]s2 & 7,b7 ! p>ticul> po9t at :i* su* comput]s are capable ( attack+ real _w cryptographic sy/ems t classical comput]s are unable to attack4 7#c7 ,an assessm5t ( ! urg5cy = migration to po/-quantum cryptography = ea* ,f$]al ag5cy relative to-- 7,a7 ! critical functions ( ea* ag5cy2 & 7,b7 ! risk ea* ag5cy faces %\ld a cryptographically relevant quantum comput] attack a sy/em op]at$ by ! ag5cy4 7#d7 ,p]=mance measures = migration to po/-quantum cryptography to be us$ by ea* ,f$]al ag5cy = ea* ( ! foll[+ #d /ages ( migration3 7,a7 ,prep>ation = migration to po/-quantum cryptography4 7,b7 ,e/abli%m5t ( a basel9e und]/&+ ( ! data inv5tory4 7,c7 ,plann+ & execution ( po/-quantum cryptographic solutions1 includ+ ensur+ t data at re/ & 9 motion is subject to appropriate protections4 7,d7 ,monitor+ & evaluation ( migration success & assessm5t ( cryptographic security4 7#e7 ,a plan = evaluat+ & monitor+ entities t are at high risk ( quantum cryptographic attacks1 includ+ entities det]m9$ to be provid]s ( critical infra/ructure4 7b7 ,po/-,quantum pilot program ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,subcommittee on ! ,economic & ,security ,implications ( ,quantum ,in=mation ,sci5ce %all e/abli% a po/-quantum pilot program t requires ea* sector risk managem5t ag5cy to upgrade n less ?an "o high-impact sy/em to po/-quantum cryptography n lat] ?an ,janu>y #a1 #bjbg4 7c7 ,duties ( ! ,(fice ( ,electronic ,gov]nm5t ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,adm9i/rator ( ! ,(fice ( ,electronic ,gov]nm5t1 9 coord9ation ) ! ,subcommittee on ! ,economic & ,security ,implications ( ,quantum ,in=mation ,sci5ce1 %all-- 7#a7 survey ! heads ( ,f$]al ag5cies = in=mation relat+ to ! co/ ( migration to po/-quantum cryptography by ! ,f$]al ag5cies1 includ+ e/imates = ! p]sonnel1 equipm5t1 & "t ne$$ to fully implem5t po/-quantum cryptography1 9 alignm5t ) ! ,national ,quantum ,cyb]security ,migration ,/rategy develop$ pursuant to subsection 7a72 7#b7 v]ify t ! in=mation provid$ "u p>agraph 7#a7 is reali/ic & fiscally s\nd2 7#c7 id5tify ! fund+ & res\rces necess>y = ,f$]al ag5cies to c>ry out ! migration to po/-quantum cryptography2 & 7#d7 advise on h[ ,f$]al ag5cies %\ld enc\rage ! adoption ( po/-quantum cryptography by ! private sector4 7d7 ,report to ,congress ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,director ( ! ,(fice ( ,managem5t & ,budget & ! ,subcommittee on ! ,economic & ,security ,implications ( ,quantum ,in=mation ,sci5ce %all jo9tly submit to ,congress a report detail+ _! f9d+s ) respect to ! po/-quantum migration assessm5ts requir$ "u subsection 7a77#c71 ! pilot program e/abli%$ pursuant to subsection 7b71 & ! survey on associat$ co/s ( execut+ ! migration requir$ by subsection 7c77#a74 7e7 ,assessm5t by ,comptroll] ,g5]al ,n lat] ?an #a ye> aft] ! developm5t ( ! ,national ,quantum ,cyb]security ,migration ,/rategy "u subsection 7a71 & annually !reaft]1 ! ,comptroll] ,g5]al ( ! ,unit$ ,/ates %all submit to ,congress an assessm5t1 us+ ! p]=mance measures describ$ 9 subsection 7a77#d71 ( ! progress made by ea* ,f$]al ag5cy 9 migrat+ to po/-quantum cryptography4