I 

118TH CONGRESS 

1ST SESSION H. R. 5759 

To amend the National Quantum Initiative Act and the Cyber Security 

Research and Development Act to advance the rapid deployment of 

post quantum cybersecurity standards across the United States economy, 

support United States cryptography research, and for other purposes. 

IN THE HOUSE OF REPRESENTATIVES 

SEPTEMBER 27, 2023 

Mr. JACKSON of North Carolina (for himself and Ms. TENNEY) introduced the 

following bill; which was referred to the Committee on Science, Space, 

and Technology 

A BILL 

To amend the National Quantum Initiative Act and the 

Cyber Security Research and Development Act to advance the rapid deployment of post quantum cybersecurity standards across the United States economy, support 

United States cryptography research, and for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘Post Quantum Cyber5 security Standards Act’’. 


kjohnson on DSK7ZCZBW3PROD with $$_JOB
2 

•HR 5759 IH

1 SEC. 2. NIST CRYPTOGRAPHY PROGRAMS AND NSF CRYP2 TOGRAPHY RESEARCH. 

3 (a) NATIONAL INSTITUTE OF STANDARDS AND

4 TECHNOLOGY CRYPTOGRAPHY PROGRAMS.—The Na5 tional Quantum Initiative Act is amended— 

6 (1) in section 2 (15 U.S.C. 8801)— 

7 (A) by redesignating paragraphs (4), (5), 

8 (6), (7), the first paragraph (8) (relating to the 

9 definition of ‘‘Subcommittee on Economic and 

10 Security Implications’’), and the second para11 graph (8) (relating to the definition of ‘‘Sub12 committee on Quantum Information Science’’) 

13 as paragraphs (5), (7), (8), (9), (11), and (12), 

14 respectively; 

15 (B) by inserting after paragraph (3) the 

16 following new paragraph: 

17 ‘‘(4) CRITICAL INFRASTRUCTURE.—The term 

18 ‘critical infrastructure’ has the meaning given such 

19 term in section 1016(e) of Public Law 107–56 (42 

20 U.S.C. 5195c(e))’’; 

21 (C) by inserting after paragraph (5), as so 

22 redesignated, the following new paragraph: 

23 ‘‘(6) POST-QUANTUM CRYPTOGRAPHY.—The 

24 term ‘post-quantum cryptography’ means those cryp25 tographic algorithms or methods that are assessed 


kjohnson on DSK7ZCZBW3PROD with $$_JOB
3 

•HR 5759 IH

1 not to be specifically vulnerable to attack by either 

2 a quantum computer or classical computer.’’; and 

3 (D) by inserting after paragraph (9), as so 

4 redesignated, the following new paragraph: 

5 ‘‘(10) SECTOR RISK MANAGEMENT AGENCY.— 

6 The term ‘sector risk management agency’ has the 

7 meaning given such term in section 2200 of the 

8 Homeland Security Act of 2002 (6 U.S.C. 650).’’; 

9 and 

10 (2) in section 201 (15 U.S.C. 8831), by— 

11 (A) redesignating subsection (c) as sub12 section (d); and 

13 (B) inserting after subsection (b) the fol14 lowing new subsection: 

15 ‘‘(c) POST QUANTUM CRYPTOGRAPHY DEPLOY16 MENT.— 

17 ‘‘(1) IN GENERAL.—The Director of the Na18 tional Institute of Standards and Technology, in 

19 consultation with the Secretary of Homeland Secu20 rity and the heads of sector risk management agen21 cies, as appropriate, shall promote the voluntary 

22 adoption and deployment of post-quantum cryptog23 raphy standards, including by— 

24 ‘‘(A) disseminating and making publicly 

25 available guidance and resources to help organiVerDate Sep 11 2014 01:55 Oct 01, 2023 Jkt 039200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\H5759.IH H5759

kjohnson on DSK7ZCZBW3PROD with $$_JOB
4 

•HR 5759 IH

1 zations adopt and deploy post-quantum cryptog2 raphy standards; 

3 ‘‘(B) providing technical assistance, as 

4 practicable, to entities that are high risk of 

5 quantum cryptoanalytic attacks, such as enti6 ties determined to be critical infrastructure or 

7 digital infrastructure providers; and 

8 ‘‘(C) conducting such other activities as 

9 determined necessary by the Director to pro10 mote the adoption and deployment of post11 quantum cryptography standards across the 

12 United States. 

13 ‘‘(2) GRANT PROGRAM.— 

14 ‘‘(A) IN GENERAL.—Subject to the avail15 ability of appropriations and after the date on 

16 which the Director of National Institute of 

17 Standards and Technology has issued post18 quantum cryptography standards under para19 graph (1), the Director may establish a pro20 gram to identify and provide technical assist21 ance through the award of grants to entities 

22 that are at high risk of quantum cryptoanalytic 

23 attacks, including by granting funds, in adopt24 ing such post-quantum cryptographic standards 


kjohnson on DSK7ZCZBW3PROD with $$_JOB
5 

•HR 5759 IH

1 and remediating quantum-related 

2 vulnerabilities. 

3 ‘‘(B) USE OF FUNDS.—Grants awarded to 

4 entities under this subsection may be used to 

5 cover reasonable costs, up to a specified amount 

6 established by the Director of the National In7 stitute of Standards and Technology, of activi8 ties to adopt post-quantum cryptographic 

9 standards and remediate quantum-related 

10 vulnerabilities. 

11 ‘‘(C) GUIDANCE.—The Director of the Na12 tional Institute of Standards and Technology 

13 may develop, and periodically update, guidance, 

14 including eligibility, application disclosure re15 quirements, grant amount and duration, and 

16 any additional requirements regarding the 

17 award of grants under this paragraph. 

18 ‘‘(D) CONSULTATION.—If the program de19 scribed in this paragraph is established, the Di20 rector of the National Institute of Standards 

21 and Technology shall consult with the Director 

22 of the Cybersecurity and Infrastructure Secu23 rity Agency of the Department of Homeland 

24 Security, the heads of other Sector Specific 

25 Agencies and risk management agencies, and 


kjohnson on DSK7ZCZBW3PROD with $$_JOB
6 

•HR 5759 IH

1 appropriate representatives of private sector en2 tities, including nonprofit organizations, to 

3 share information regarding the program and 

4 guidance developed under subparagraph (C).’’. 

5 (b) NATIONAL SCIENCE FOUNDATION CRYPTOG6 RAPHY RESEARCH.—Subsection (a)(1)(A) of section 4 of 

7 the Cyber Security Research and Development Act (15 

8 U.S.C. 7403) is amended by inserting ‘‘, including post9 quantum cryptography’’ before the semicolon. 

Æ 


kjohnson on DSK7ZCZBW3PROD with $$_JOB