Sec. 3. Guidance on upgrading to post-quantum cryptography
247 words·~1 min read·
/bill/119/s/3312/is/section-3A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than 180 days after the date of the enactment of this Act, the Director of the National Institute of Standards and Technology, in consultation with the Director of the Office of Science and Technology Policy, shall establish guidance for upgrading information systems to post-quantum cryptography, including guidance that is specifically tailored for critical infrastructure sectors. The guidance established pursuant to subsection
(a)shall include standards and selection criteria to guide the procurement and deployment of commercial solutions for an entity seeking to upgrade to post-quantum cryptography. The Director of the National Institute of Standards and Technology shall make available to entities in the private sector the guidance established under subsection (a). The Director may satisfy the requirement under paragraph
(1)through the publication of Special Publications. If an industry sector representative, who is part of the Quantum Economic Development Consortium, decides to carry out an assessment of the adoption by the industry sector of the guidance established under subsection (a), the Director of the National Institute of Standards and Technology shall offer to collaborate on such assessment with such representative. If requested by the representative described in paragraph (1), the Director of the National Institute of Standards and Technology shall support the assessment by providing— technical and administrative support; test beds to support the assessment; and interoperability frameworks. The Director of the National Institute of Standards and Technology may support an assessment described in paragraph
(1)by coordinating between stakeholders as the Director considers necessary.