Congress funds quantum-proof encryption upgrade for critical infrastructure
H.R. 3259 — Post Quantum Cybersecurity Standards Act · Filed by Haley Stevens (D-MI) · 3 cosponsors · Introduced May 7, 2025 · Reported out
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill amends two existing laws to accelerate adoption of post-quantum cryptography—encryption methods designed to resist attacks from quantum computers—across U.S. critical infrastructure and digital systems. It directs NIST to issue post-quantum cryptography standards and provide technical guidance to organizations, establishes a voluntary grant program to help high-risk entities (especially critical infrastructure) pay for upgrading their systems, and expands NSF funding for cryptography research. The bill does not mandate adoption; it funds and facilitates voluntary transition.
Why we flagged it
The bill's core function is to fund and facilitate voluntary adoption of post-quantum cryptography standards across critical infrastructure. It is a public-investment measure in national cybersecurity resilience, not a deregulation, tax carve-out, or private subsidy.
What the text implies
- Grant program eligibility and award amounts are left to NIST discretion ('specified amount established by the Director'), creating potential for uneven distribution of federal funds across sectors and regions depending on how NIST interprets 'high risk' and 'critical infrastructure.'
- The bill does not establish a timeline for NIST to issue post-quantum cryptography standards, meaning the grant program cannot launch until standards are published—implementation delay risk exists if NIST prioritization shifts.
- Private sector entities (including nonprofit organizations) are eligible for grants, but the bill does not require cost-sharing or repayment, potentially subsidizing private cybersecurity upgrades that companies might otherwise fund themselves.
- The definition of 'critical infrastructure' is cross-referenced to the Patriot Act (Public Law 107–56), which is broad and includes private utilities, telecommunications, and financial systems—effectively making federal grant funds available to private companies operating critical infrastructure.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
Ordinary citizens depend on secure digital infrastructure for banking, healthcare, utilities, and communications. Quantum computers pose a genuine future threat to current encryption. This bill funds proactive defense—technical assistance and grants to help critical infrastructure upgrade—without imposing new restrictions on citizens or creating liability shields for private companies. The voluntary approach and public funding model avoid shifting costs to consumers.
Who stands to gain
- cybersecurity software and hardware vendors (cryptography implementation tools)
- critical infrastructure operators (utilities, telecommunications, financial services)
- digital infrastructure providers
- consulting and systems integration firms specializing in cryptography deployment
Named in the bill
National Institute of Standards and Technology (NIST), Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), National Science Foundation (NSF), Sector Specific Agencies, critical infrastructure operators, digital infrastructure providers
Where it stands
3 cosponsors: 3 Republicans.
- May 7, 2025 — Introduced · Congress.gov: “Introduced in House”
- May 7, 2025 — Referred to House Committee on Science, Space, and Technology · Congress.gov: “Referred to the House Committee on Science, Space, and Technology”
- Jun 11, 2025 — Markup held in committee · Congress.gov: “Committee Consideration and Mark-up Session Held”
- Jun 11, 2025 — Reported out of committee · Congress.gov: “Ordered to be Reported by the Yeas and Nays: 35 - 0”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
1 lobbying clients named this bill on 2 disclosure filings across 2 quarters, Dec 2025 to Jun 2026. Those filings disclosed $100,000 in lobbying spend. A filing names 14 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 0% of bills with at least one filing.
Haley Stevens, the sponsor, reported $1,745,251 in PAC receipts in the 2026 cycle.
- Quantum Industry Coalition — $100,000 on 2 filings
Lobbying Disclosure Act filings through Jul 14, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (4,272 characters) on Jul 2, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Dec 2025 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 14, 2026 · page rendered 2026-10-20.
“Congress funds quantum-proof encryption upgrade for critical infrastructure” QuorumCivic. https://share.quorumcivic.app/bill/119/hr3259 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.