Homeland Security and Governmental Affairs Committee
Introduced
In Committee
On Floor
Passed Chamber
Enacted
This bill aims to prepare Federal agencies for the threat posed by quantum computers to current cryptographic systems by mandating a migration to post-quantum cryptography . It requires the Subcommittee on the Economic and Security Implications of Quantum Information Science, in coordination with the National Institute of Standards and Technology (NIST), to develop a comprehensive National Quantum Cybersecurity Migration Strategy within 180 days of enactment. This strategy must define a cryptographically relevant quantum computer, recommend standards for agencies to identify such threats, assess the urgency of migration for each agency based on critical functions and risk, and establish performance measures for four stages of migration. Additionally, the bill mandates the establishment of a post-quantum pilot program within 180 days, requiring each sector risk management agency to upgrade at least one high-impact system to post-quantum cryptography by January 1, 2027. The Office of Electronic Government is tasked with surveying Federal agencies on the estimated costs of migration, verifying these estimates, identifying necessary funding, and advising on encouraging private sector adoption of post-quantum cryptography. A joint report detailing findings from the migration assessments, pilot program, and cost survey must be submitted to Congress within one year. Finally, the Comptroller General of the United States is required to conduct an annual assessment, beginning one year after the strategy's development, to evaluate the progress made by each Federal agency in migrating to post-quantum cryptography, utilizing the performance measures outlined in the strategy.
Get AI-generated questions to help you understand this bill better
Timeline
Introduced in Senate
Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Introduced in Senate
Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Science, Technology, Communications
The National Quantum Cybersecurity Migration Strategy Act of 2025.
USA119th CongressS-2558| Senate
| Updated: 7/30/2025
This bill aims to prepare Federal agencies for the threat posed by quantum computers to current cryptographic systems by mandating a migration to post-quantum cryptography . It requires the Subcommittee on the Economic and Security Implications of Quantum Information Science, in coordination with the National Institute of Standards and Technology (NIST), to develop a comprehensive National Quantum Cybersecurity Migration Strategy within 180 days of enactment. This strategy must define a cryptographically relevant quantum computer, recommend standards for agencies to identify such threats, assess the urgency of migration for each agency based on critical functions and risk, and establish performance measures for four stages of migration. Additionally, the bill mandates the establishment of a post-quantum pilot program within 180 days, requiring each sector risk management agency to upgrade at least one high-impact system to post-quantum cryptography by January 1, 2027. The Office of Electronic Government is tasked with surveying Federal agencies on the estimated costs of migration, verifying these estimates, identifying necessary funding, and advising on encouraging private sector adoption of post-quantum cryptography. A joint report detailing findings from the migration assessments, pilot program, and cost survey must be submitted to Congress within one year. Finally, the Comptroller General of the United States is required to conduct an annual assessment, beginning one year after the strategy's development, to evaluate the progress made by each Federal agency in migrating to post-quantum cryptography, utilizing the performance measures outlined in the strategy.