,,ii  #aai? ,,congress  #a/ ,session    
,s4 #ccab  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,decemb] #b1 #bjbe,mr4 
,pet]s 7= himself & ,mrs4 ,blackburn7   
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to require ! ,director ( !    
,national ,in/itute ( ,/&>ds &          
,te*nology to develop guidance = upgrad+
 in=mation sy/ems to po/-quantum        
cryptography1 & = o!r purposes4  #a4    
,%ort title ,?is ,act may be cit$ z !   
,quantum ,read9ess & ,innovation ,act ( 
#bjbe4  #b4 ,def9itions ,9 ?is ,act3    
7#a7 ,appropriate congressional         
committees ,! t]m appropriate           
congressional committees means-- 7,a7 ! 
,committee on ,comm]ce1 ,sci5ce1 &      
,transportation ( ! ,s5ate2 &  7,b7 !   
,committee on ,en]gy & ,comm]ce ( !     
,h\se ( ,repres5tatives4  7#b7          
,classical comput]2 quantum comput] ,!  
t]ms classical comput] & quantum comput]
 h ! mean+s giv5 su* t]ms 9 section #c (

 ! ,quantum ,comput+ ,cyb]security      
,prep>$ness ,act 7,public ,law #aag-bfj2
 #f ,u4,s4,c4 #aebf note74  7#c7        
,critical infra/ructure sectors ,! t]m  
critical infra/ructure sectors means !  
critical infra/ructure sectors def9$ 9 !
 ,national ,security ,memor&um on       
,critical ,infra/ructure ,security &    
,resili5ce 7,,nsm-#bb71 dat$ ,april #cj1
 #bjbd4  7#d7 ,high-impact sy/em ,! t]m 
high-impact sy/em means a ,f$]al        
in=mation sy/em t holds s5sitive        
in=mation1 ! loss ( :i* w\ld be         
categoriz$ z high impact "u ,f$]al      
,in=mation ,process+ ,/&>ds ,publication
 #aii 7relat+ to /&>ds = security       
categorization ( ,f$]al in=mation &     
in=mation sy/ems71 z 9 effect on ! day  
be=e ! date ( ! enactm5t ( ?is ,act4    
7#e7 ,po/-quantum cryptography ,! t]m   
po/-quantum cryptography-- 7,a7 means ^?
 cryptographic algori?ms or me?ods t are
 assess$ n to be specifically vuln]able 
to attack by ei!r a quantum comput] or  
classical comput]2 &  7,b7 includes--   

7i7 ! lattice-bas$ digital signature    
algori?m specifi$ 9 ,national ,in/itute 
( ,/&>ds & ,te*nology ,f$]al ,in=mation 
,process+ ,/&>ds ,publication #bjd 7dat$
 ,augu/ #ac1 #bjbd2 relat+ to           
,module-,lattice-,bas$ ,digital         
,signature ,/&>d71 or any successor     
/&>d2  7ii7 ! module-lattice-bas$ key   
encapsulation me*anism specifi$ 9       
,national ,in/itute ( ,/&>ds &          
,te*nology ,f$]al ,in=mation ,process+  
,/&>ds ,publication #bjc 7dat$ ,augu/   
#ac1 #bjbd2 relat+ to                   
,module-,lattice-,bas$                  
,key-,encapsulation ,me*anism ,/&>d71 or
 any successor /&>d2 &  7iii7 any       
cryptographic algori?m or me?od         
implem5t$ 9 accordance ) ,national      
,in/itute ( ,/&>ds & ,te*nology ,f$]al  
,in=mation ,process+ ,/&>d ,publication 
#adj-c 7dat$ ,m>* #bb1 #bjai2 relat+ to 
,security ,requirem5ts = ,cryptographic 
,modules71 or any successor /&>d1 op]at+
 )9 a z]o tru/ ar*itecture z describ$ 9 
,national ,in/itute ( ,/&>ds &          

,te*nology ,special ,publication        
#hjj-bjg 7dat$ ,augu/ #bjbj2 relat+ to  
,z]o ,tru/ ,ar*itecture71 or any        
successor /&>d4  7#f7 ,sector risk      
managem5t ag5cy ,! t]m sector risk      
managem5t ag5cy has ! mean+ giv5 su* t]m
 9 section #bbjj ( ! ,homel& ,security  
,act ( #bjjb 7#f ,u4,s4,c4 #fej74  #c4  
,guidance on upgrad+ to po/-quantum     
cryptography  7a7 ,9 g5]al ,n lat] ?an  
#ahj days aft] ! date ( ! enactm5t ( ?is
 ,act1 ! ,director ( ! ,national        
,in/itute ( ,/&>ds & ,te*nology1 9      
consultation ) ! ,director ( ! ,(fice ( 
,sci5ce & ,te*nology ,policy1 %all      
e/abli% guidance = upgrad+ in=mation    
sy/ems to po/-quantum cryptography1     
includ+ guidance t is specifically      
tailor$ = critical infra/ructure        
sectors4  7b7 ,requirem5t ,! guidance   
e/abli%$ pursuant to subsection 7a7 %all
 include /&>ds & selection crit]ia to   
guide ! procurem5t & deploym5t (        
comm]cial solutions = an entity seek+ to
 upgrade to po/-quantum cryptography4   

7c7 ,dissem9ation ( guidance  7#a7 ,9   
g5]al ,! ,director ( ! ,national        
,in/itute ( ,/&>ds & ,te*nology %all    
make available to entities 9 ! private  
sector ! guidance e/abli%$ "u subsection
 7a74  7#b7  ,special ,publications  ,! 
,director may satisfy ! requirem5t "u   
p>agraph 7#a7 ?r\gh ! publication (     
,special ,publications4  7d7            
,coord9ation & assi/ance = indu/ry-,l$  
assessm5ts ( adoption ( guidance  7#a7  
,9 g5]al  ,if an indu/ry sector         
repres5tative1 :o is "p ( ! ,quantum    
,economic ,developm5t ,consortium1      
decides to c>ry out an assessm5t ( !    
adoption by ! indu/ry sector ( !        
guidance e/abli%$ "u subsection 7a71 !  
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology %all (f] to         
collaborate on su* assessm5t ) su*      
repres5tative4  7#b7  ,te*nical         
,assi/ance & ,int]op]ability ,frameworks
  ,if reque/$ by ! repres5tative        
describ$ 9 p>agraph 7#a71 ! ,director ( 
! ,national ,in/itute ( ,/&>ds &        

,te*nology %all support ! assessm5t by  
provid+--  7,a7 te*nical & adm9i/rative 
support2  7,b7 te/ b$s to support !     
assessm5t2 &  7,c7 int]op]ability       
frameworks4  7#c7  ,coord9ation         
,assi/ance  ,! ,director ( ! ,national  
,in/itute ( ,/&>ds & ,te*nology may     
support an assessm5t describ$ 9 p>agraph
 7#a7 by coord9at+ betwe5 /akehold]s z !
 ,director consid]s necess>y4  #d4      
,/rategy = ,f$]al ag5cy upgrade to      
po/-quantum cryptography  7a7 ,national 
,quantum ,cyb]security ,upgrade ,/rategy
 ,n lat] ?an #cfj days aft] ! date ( !  
enactm5t ( ?is ,act1 ! ,director ( !    
,(fice ( ,sci5ce & ,te*nology ,policy1 9
 coord9ation ) ! ,director ( ! ,national
 ,in/itute ( ,/&>ds & ,te*nology & 9    
consultation ) ! ,quantum ,economic     
,developm5t ,consortium1 %all develop a 
,national ,quantum ,cyb]security        
,upgrade ,/rategy t includes ! foll[+3  
7#a7 ,a def9ition ( a cryptographically 
relevant quantum comput]4  7#b7         
,recomm5d$ /&>ds to apply to det]m9e    

:e!r a quantum comput] meets su*        
def9ition1 includ+-- 7,a7 ! *>act]i/ics 
( su* comput]s2 &  7,b7 ! p>ticul> po9t 
at :i* su* comput]s are capable (       
attack+ real _w sy/ems t classical      
comput]s are unable to attack4  7#c7    
,guidel9es = assess+ ! urg5cy ( upgrad+ 
to po/-quantum cryptography = ea* ,f$]al
 ag5cy relative to-- 7,a7 ! critical    
functions ( ea* ag5cy2 &  7,b7 ! risk   
ea* ag5cy faces %\ld a cryptographically
 relevant quantum comput] attack a sy/em
 op]at$ by ! ag5cy4  7#d7 ,recomm5d$    
p]=mance measures = upgrad+ to          
po/-quantum cryptography = ! foll[+     
tasks3 7,a7 ,prep>ation = upgrad+ to    
po/-quantum cryptography1 includ+-- 7i7 
! adoption ( h>dw>e integrat+           
quantum-resi/ant cryptographic          
algori?ms2 &  7ii7 ! deploym5t (        
s(tw>e-only po/-quantum cryptography    
ov]lays t meet or exce$ security /&>ds  
set =? 9 ! ,f$]al ,in=mation ,process+  
,/&>ds issu$ by ! ,national ,in/itute ( 
,/&>ds & ,te*nology4  7,b7 ,e/abli%m5t (

 a basel9e und]/&+ ( ! data inv5tory1   
includ+ ?r\gh ! use ( automat$ tools to 
id5tify assets4  7,c7 ,plann+ &         
execution ( po/-quantum cryptographic   
solutions1 includ+ ensur+ t data at re/ 
& 9 motion is subject to appropriate    
protections4  7,d7 ,monitor+ & evaluat+ 
! success ( ! upgrade & assess+ !       
security ( ! sy/em4  7#e7 ,a plan =     
implem5t+ ! above p]=mance measures1    
includ+ evaluat+ & monitor+ entities t  
are at high risk ( quantum attacks1     
includ+ sector risk managem5t ag5cies4  
7b7 ,po/-,quantum volunt>y pilot program
  7#a7 ,9 g5]al ,n lat] ?an #cfj days   
aft] ! date ( ! enactm5t ( ?is ,act1 !  
,director ( ! ,(fice ( ,sci5ce &        
,te*nology ,policy %all e/abli% a pilot 
program to provide plann+1 te*nical1 &  
any o!r support ! ,director consid]s    
appropriate to any cov]$ entity t elects
 to p>ticipate 9 ! program = ! purpose (
 upgrad+ ! sy/ems ( su* cov]$ entity to 
po/-quantum cryptography4  7#b7  ,high  
risk entities  ,! ,director %all        

enc\rage any cov]$ entity t is at high  
risk ( quantum attack to p>ticipate 9 ! 
pilot program e/abli%$ "u p>agraph 7#a74
  7#c7  ,requirem5ts  ,"u ! pilot       
program e/abli%$ "u p>agraph 7#a7--     
7,a7 n lat] ?an #ah mon?s aft] ! date ( 
! e/abli%m5t ( ! program1 n few] ?an #a 
high-impact sy/em ( any cov]$ entity    
p>ticipat+ 9 ! program %all be upgrad$  
to po/-quantum cryptography 9 accordance
 ) ! recomm5d$ p]=mance measures        
describ$ 9 subsection 7a77#d72 &  7,b7  
^u completion ( ! initial upgrade "u    
subp>agraph 7,a71 ! head ( ! cov]$      
entity may upgrade--  7i7 #a additional 
sy/em 9 accordance ) su* p]=mance       
measures2 or  7ii7 #b or m sy/ems 9     
accordance ) su* p]=mance measures if ! 
head notifies ! ,director be=e initiat+ 
su* upgrade4  7#d7  ,pilot program      
reports  7,a7  ,9 g5]al  ,= ea* cov]$   
entity p>ticipat+ 9 ! program e/abli%$  
"u p>agraph 7#a71 ! ,director1 9        
coord9ation ) ! head ( su* entity1 %all 
submit to ! appropriate congressional   

committees--  7i7 an initial report n   
lat] ?an #ahj days aft] ! date on :i* ! 
initial upgrade is complet$ "u p>agraph 
7#c77;,a72 &  7ii7 an updat$ report     
annually until su* date z ! ,director   
consid]s appropriate4  7,b7  ,elem5ts   
,ea* report submitt$ "u subp>agraph 7,a7
 %all describe--  7i7 ! actions ( ! head
 ( ! cov]$ entity 9 c>ry+ out ! program2
 &  7ii7 any plann+1 te*nical1 or o!r   
support t ! ,director provid$ to ! head 
( ! cov]$ entity ?r\gh ! program4  7#e7 
,cov]$ entity def9$  ,9 ?is subsection1 
! t]m cov]$ entity means-- 7,a7 a sector
 risk managem5t ag5cy2  7,b7 a ,f$]al   
ag5cy2 or  7,c7 a mission p>tn] ( a     
,f$]al ag5cy4  7c7 ,report to ,congress 
,n lat] ?an #cfj days aft] ! date ( !   
enactm5t ( ?is ,act1 ! ,director ( !    
,(fice ( ,sci5ce & ,te*nology ,policy   
%all submit to ! appropriate            
congressional committees a report t     
includes ! ,national ,quantum           
,cyb]security ,upgrade ,/rategy develop$
 "u subsection 7a7 & a description ( !  

pilot program e/abli%$ pursuant to      
subsection 7b77#a74