Quantum Encryption Readiness and Resilience Act

Summary

Requires a federal subcommittee to assess risks from so-called cryptographically-relevant quantum computers and to produce an initial assessment and mitigation plan within one year, followed by annual progress reports for four years. The subcommittee must evaluate U.S. development and adoption of mitigations (including post-quantum cryptography), identify vulnerable sectors, propose collaboration and support measures, and provide guidelines for determining when a quantum computer is cryptographically relevant.

• Requires a federal subcommittee to produce an initial assessment and mitigation plan on quantum threats to cryptography within 1 year.
• Mandates annual classified or unclassified progress reports on mitigation adoption for four years after the initial report.
• Assessments must compare U.S. progress on cryptographically-relevant quantum computers to other countries.
• Directs evaluation of public- and private-sector adoption of mitigations, including post-quantum cryptography.
• Requires identification of the most vulnerable economic sectors and development of a mitigation plan with collaboration and support measures.
• Calls for guidelines to determine when a quantum computer is "cryptographically-relevant."
• Submits findings, timetables, and legislative and non-legislative recommendations to appropriate congressional committees.
• Focuses on analysis, planning, and guidance rather than creating new regulatory mandates or appropriating funds.