H.R. 4942

119 HR 4942 IH: Quantum Encryption Readiness and Resilience Act
 U.S. House of Representatives
 2025-08-08
 text/xml
 EN
 Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.
 I  119th CONGRESS  1st Session  H. R. 4942  IN THE HOUSE OF REPRESENTATIVES   August 8, 2025   Mr. Subramanyam  (for himself,  Mr. McGuire ,  Ms. Stevens , and  Mr. Harrigan ) introduced the following bill; which was referred to the  Committee on Science, Space, and Technology    A BILL
To direct the Subcommittee on the Economic and Security Implications of Quantum Information Science to submit reports on mitigating the cybersecurity and national security risks posed by certain quantum computers, and for other purposes.
1.
Short title
This Act may be cited as the   Quantum Encryption Readiness and Resilience Act  .
2.
Reports on mitigating the cybersecurity and national security risks posed by certain quantum computers
(a)
Initial report
Not later than one year after the date of the enactment of this Act, the Subcommittee on the Economic and Security Implications of Quantum Information Science established under section 105 of the National Quantum Initiative Act ( 15 U.S.C. 8814a ) shall carry out the following:
(1)
Conduct an assessment of each of the following:
(A)
The capabilities and progress of the United States, relative to other countries, with respect to the following:
(i)
Developing a cryptographically-relevant quantum computer.
(ii)
Adopting security and preparedness measures, including post-quantum cryptography, to mitigate the cybersecurity and national security risks posed by such computer.
(B)
The progress of private sector entities and public sector entities in the United States toward adopting such measures, including the progress toward implementing the guidance under section 4 of the Quantum Computing Cybersecurity Preparedness Act ( 6 U.S.C. 1526 ).
(2)
Identify the sectors of the economy most vulnerable to such risks.
(3)
Based upon such assessments and such identification, develop a plan to mitigate such risks, including by carrying out the following:
(A)
Facilitating collaboration between agencies and departments of the Federal Government.
(B)
Facilitating the exchange of information between such private sector entities and public sector entities.
(C)
Forming partnerships between the Federal Government and such private sector entities.
(D)
Identifying such measures that such private sector entities and public sector entities may adopt.
(E)
Supporting such exchange and the adoption of such measures, including by identifying actions, including piloting projects, providing technical assistance, and publishing cyber hygiene guidance for such private sector entities, that such agencies and departments may carry out to support such exchange and adoption.
(4)
Develop guidelines for determining whether a quantum computer is a cryptographically-relevant quantum computer.
(5)
Submit to the appropriate committees of Congress a report in classified or unclassified form, as appropriate, that includes information relating to the following:
(A)
The assessments conducted under paragraph (1).
(B)
The sectors identified under paragraph (2).
(C)
The plan developed under paragraph (3).
(D)
The guidelines developed under paragraph (4).
(E)
Recommendations for the following:
(i)
A timetable to implement such plan.
(ii)
Policies to implement such plan that require legislation.
(iii)
Policies to implement such plan that do not require legislation.
(b)
Subsequent reports
Not later than one year after the report under subsection (a) is submitted and annually thereafter for four years, the Subcommittee referred to in such subsection shall submit to Congress a report in classified or unclassified form, as appropriate, that includes information relating to the progress of private sector entities and public sector entities in the United States toward adopting the measures described in such subsection.
(c)
Definitions
In this section:
(1)
Appropriate committees of Congress
The term  appropriate committees of Congress  has the meaning given such term in section 2 of the National Quantum Initiative Act ( 15 U.S.C. 8801 ).
(2)
Classical computer; post-quantum cryptography; quantum computer
The terms  classical computer ,  post-quantum cryptography , and  quantum computer  have the meanings given such terms in section 3 of the Quantum Computing Cybersecurity Preparedness Act ( 6 U.S.C. 1526  note).
(3)
Cryptographically-relevant quantum computer
The term  cryptographically-relevant quantum computer  means a quantum computer with the ability to compromise a cryptographic system that a classical computer is unable to compromise.