Quantum Encryption Readiness and Resilience Act

Summary

Requires a federal subcommittee on quantum information science to assess the cybersecurity and national security risks from quantum computers that can break current cryptography, produce an initial report within one year, and submit annual progress updates for four years. The reports must identify vulnerable economic sectors, recommend mitigation actions (including post-quantum cryptography adoption, interagency coordination, public–private information sharing, pilots, and technical assistance), and provide guidelines for judging when a quantum computer is “cryptographically relevant.”

• Mandates an initial federal assessment of quantum-computing risks to cryptography within one year and annual updates for four years.
• Requires identification of the most vulnerable economic sectors to quantum-enabled cryptographic compromise.
• Directs a mitigation plan emphasizing interagency collaboration, public–private information sharing, and technical assistance.
• Calls for guidelines to decide when a quantum computer is "cryptographically relevant."
• Allows reports to be classified or unclassified as appropriate, so some findings may be restricted.
• Builds on existing federal definitions and guidance related to quantum computing and post-quantum cryptography.
• Focuses on planning, coordination, and recommended actions rather than creating new regulatory penalties or explicit appropriations.
• Includes recommended measures for both public and private entities, plus pilots to test defenses and deployment strategies.