Congress funds quantum-proof encryption upgrade for critical infrastructure

What it does

This bill amends two existing laws to accelerate adoption of post-quantum cryptography—encryption methods designed to resist attacks from quantum computers—across U.S. critical infrastructure and digital systems. It directs NIST to issue post-quantum cryptography standards and provide technical guidance to organizations, establishes a voluntary grant program to help high-risk entities (especially critical infrastructure) pay for upgrading their systems, and expands NSF funding for cryptography research. The bill does not mandate adoption; it funds and facilitates voluntary transition.

Why we flagged it

The bill's core function is to fund and facilitate voluntary adoption of post-quantum cryptography standards across critical infrastructure. It is a public-investment measure in national cybersecurity resilience, not a deregulation, tax carve-out, or private subsidy.

What the text implies

• Grant program eligibility and award amounts are left to NIST discretion ('specified amount established by the Director'), creating potential for uneven distribution of federal funds across sectors and regions depending on how NIST interprets 'high risk' and 'critical infrastructure.'
• The bill does not establish a timeline for NIST to issue post-quantum cryptography standards, meaning the grant program cannot launch until standards are published—implementation delay risk exists if NIST prioritization shifts.

The full analysis lists 4 implications of this text.

Who stands to gain

cybersecurity software and hardware vendors (cryptography implementation tools); critical infrastructure operators (utilities, telecommunications, financial services); digital infrastructure providers