SEC. 2. NIST CRYPTOGRAPHY PROGRAMS AND NSF CRYP-
TOGRAPHY RESEARCH. 
(a) NATIONAL
INSTITUTE
OF
STANDARDS
AND 
TECHNOLOGY
CRYPTOGRAPHY
PROGRAMS.—The Na-
tional Quantum Initiative Act is amended— 
(1) in section 2 (15 U.S.C. 8801)— 
(A) by redesignating paragraphs (4), (5), 
(6), (7), the first paragraph (8) (relating to the 
definition of ‘‘Subcommittee on Economic and 
Security Implications’’), and the second para-
graph (8) (relating to the definition of ‘‘Sub-
committee on Quantum Information Science’’) 
as paragraphs (5), (7), (8), (9), (11), and (12), 
respectively; 
(B) by inserting after paragraph (3) the 
following new paragraph: 
‘‘(4) CRITICAL
INFRASTRUCTURE.—The term 
‘critical infrastructure’ has the meaning given such 
term in section 1016(e) of Public Law 107–56 (42 
U.S.C. 5195c(e))’’; 
(C) by inserting after paragraph (5), as so 
redesignated, the following new paragraph: 
‘‘(6) 
POST-QUANTUM
CRYPTOGRAPHY.—The 
term ‘post-quantum cryptography’ means those cryp-
tographic algorithms or methods that are assessed 
VerDate Sep 11 2014 
01:55 Oct 01, 2023
Jkt 039200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H5759.IH
H5759
kjohnson on DSK7ZCZBW3PROD with $$_JOB
not to be specifically vulnerable to attack by either 
a quantum computer or classical computer.’’; and 
(D) by inserting after paragraph (9), as so 
redesignated, the following new paragraph: 
‘‘(10) SECTOR RISK MANAGEMENT AGENCY.— 
The term ‘sector risk management agency’ has the 
meaning given such term in section 2200 of the 
Homeland Security Act of 2002 (6 U.S.C. 650).’’; 
and 
(2) in section 201 (15 U.S.C. 8831), by— 
(A) redesignating subsection (c) as sub-
section (d); and 
(B) inserting after subsection (b) the fol-
lowing new subsection: 
‘‘(c) POST
QUANTUM
CRYPTOGRAPHY
DEPLOY-
MENT.— 
‘‘(1) IN GENERAL.—The Director of the Na-
tional Institute of Standards and Technology, in 
consultation with the Secretary of Homeland Secu-
rity and the heads of sector risk management agen-
cies, as appropriate, shall promote the voluntary 
adoption and deployment of post-quantum cryptog-
raphy standards, including by— 
‘‘(A) disseminating and making publicly 
available guidance and resources to help organi-
VerDate Sep 11 2014 
01:55 Oct 01, 2023
Jkt 039200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H5759.IH
H5759
kjohnson on DSK7ZCZBW3PROD with $$_JOB
zations adopt and deploy post-quantum cryptog-
raphy standards; 
‘‘(B) providing technical assistance, as 
practicable, to entities that are high risk of 
quantum cryptoanalytic attacks, such as enti-
ties determined to be critical infrastructure or 
digital infrastructure providers; and 
‘‘(C) conducting such other activities as 
determined necessary by the Director to pro-
mote the adoption and deployment of post- 
quantum cryptography standards across the 
United States. 
‘‘(2) GRANT PROGRAM.— 
‘‘(A) IN GENERAL.—Subject to the avail-
ability of appropriations and after the date on 
which the Director of National Institute of 
Standards and Technology has issued post- 
quantum cryptography standards under para-
graph (1), the Director may establish a pro-
gram to identify and provide technical assist-
ance through the award of grants to entities 
that are at high risk of quantum cryptoanalytic 
attacks, including by granting funds, in adopt-
ing such post-quantum cryptographic standards 
VerDate Sep 11 2014 
01:55 Oct 01, 2023
Jkt 039200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H5759.IH
H5759
kjohnson on DSK7ZCZBW3PROD with $$_JOB
and 
remediating 
quantum-related 
vulnerabilities. 
‘‘(B) USE OF FUNDS.—Grants awarded to 
entities under this subsection may be used to 
cover reasonable costs, up to a specified amount 
established by the Director of the National In-
stitute of Standards and Technology, of activi-
ties to adopt post-quantum cryptographic 
standards 
and 
remediate 
quantum-related 
vulnerabilities. 
‘‘(C) GUIDANCE.—The Director of the Na-
tional Institute of Standards and Technology 
may develop, and periodically update, guidance, 
including eligibility, application disclosure re-
quirements, grant amount and duration, and 
any additional requirements regarding the 
award of grants under this paragraph. 
‘‘(D) CONSULTATION.—If the program de-
scribed in this paragraph is established, the Di-
rector of the National Institute of Standards 
and Technology shall consult with the Director 
of the Cybersecurity and Infrastructure Secu-
rity Agency of the Department of Homeland 
Security, the heads of other Sector Specific 
Agencies and risk management agencies, and 
VerDate Sep 11 2014 
01:55 Oct 01, 2023
Jkt 039200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H5759.IH
H5759
kjohnson on DSK7ZCZBW3PROD with $$_JOB
appropriate representatives of private sector en-
tities, including nonprofit organizations, to 
share information regarding the program and 
guidance developed under subparagraph (C).’’. 
(b) NATIONAL SCIENCE FOUNDATION CRYPTOG-
RAPHY RESEARCH.—Subsection (a)(1)(A) of section 4 of 
the Cyber Security Research and Development Act (15 
U.S.C. 7403) is amended by inserting ‘‘, including post- 
quantum cryptography’’ before the semicolon. 
Æ 
VerDate Sep 11 2014 
01:55 Oct 01, 2023
Jkt 039200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6301
E:\BILLS\H5759.IH
H5759
kjohnson on DSK7ZCZBW3PROD with $$_JOB