Sec. 174. Cryptographic modernization schedules
325 words·~1 min read·
/bill/116/s/4049/es/section-174·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Each of the Secretaries of the military departments and the heads of relevant defense agencies and field activities shall establish and maintain a cryptographic modernization schedule that specifies, for each pertinent weapon system, command and control system, or data link, including those that use commercial encryption technologies, as relevant, the following: The expiration date or cease key date for applicable cryptographic algorithms. Anticipated key extension requests for systems where cryptographic modernization is assessed to be overly burdensome and expensive or to provide limited operational utility.
The funding and deployment schedule for modernized cryptographic algorithms, keys, and equipment over the Future Years Defense Program. The Chief Information Officer of the Department of Defense shall— oversee the construction and implementation of the cryptographic modernization schedules required by subsection (a); establish and maintain an integrated cryptographic modernization schedule for the entire Department, collating the cryptographic modernization schedules required under subsection (a); and in coordination with the Director of the National Security Agency and the Joint Staff Director for Command, Control, Communications, and Computers/Cyber, use the budget certification, standard-setting, and policy-making authorities provided in section 142 of title 10, United States Code, to amend military service and defense agency and field activity plans for key extension requests and cryptographic modernization funding and deployment that pose unacceptable risk to military operations.
Not later than January 1, 2022, and not less frequently than once each year thereafter until January 1, 2026, the Chief Information Officer of the Department and the Joint Staff Director for Command, Control, Communications, and Computers/Cyber shall jointly submit to the congressional defense committees notification of all— delays to or planned delays of military service and defense agency and field activity funding and deployment of modernized cryptographic algorithms, keys, and equipment over the previous year; and changes in plans or schedules surrounding key extension requests and waivers, including— unscheduled or unanticipated key extension requests; and unscheduled or unanticipated waivers and nonwaivers of scheduled or anticipated key extension requests.