Quantum Readiness and Innovation Act of 2025
Sponsored By: Senator Peters, Gary C. [D-MI]
Introduced
Summary
Modernize federal and critical infrastructure systems with post-quantum cryptography upgrades. This bill would create a federal framework that sets roles, timelines, standards, and pilot programs to help agencies and industry deploy quantum-resistant encryption.
Show full summary
- Federal agencies: Requires the National Institute of Standards and Technology to publish guidance within 180 days and the Office of Science and Technology Policy to deliver a National Quantum Cybersecurity Upgrade Strategy within 360 days. The strategy would define which quantum computers are cryptographically relevant, set urgency criteria for upgrades, and require automated data inventory baselining.
- Critical infrastructure and partners: Establishes a voluntary Post-Quantum Pilot Program to help eligible sector risk management agencies, federal agencies, and mission partners upgrade high-impact systems. The program would aim to upgrade at least one high-impact system within 18 months and provide initial and annual reports on actions and support.
- Standards, procurement, and industry support: Directs NIST guidance to include procurement and interoperability standards, selection criteria, and support for industry-led testing through the Quantum Economic Development Consortium. It defines post-quantum cryptography to include lattice-based digital signatures and lattice-based key encapsulation per NIST FIPS guidance and aligns upgrades with zero-trust architecture principles.
Personalized for You
How does this bill affect your finances?
Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
2 provisions identified: 2 benefits, 0 costs, 0 mixed.
National quantum upgrade strategy and pilots
This bill would require the White House Office of Science and Technology Policy to deliver a National Quantum Cybersecurity Upgrade Strategy within 360 days after enactment. The strategy would define when a quantum computer can threaten real systems, set standards and urgency guidelines for agency upgrades, and describe performance measures for preparation, data inventories, planning, and monitoring. OSTP would also create a voluntary pilot program within 360 days to help covered entities upgrade high-impact systems to post-quantum cryptography. Each participating covered entity would need to upgrade at least one high-impact system within 18 months, file an initial report within 180 days after that upgrade, and provide annual updates until the Director decides they can stop. The bill would define "high-impact system" using the FIPS 199 high-impact category as in effect the day before enactment.
NIST guidance for post-quantum cryptography
This bill would require NIST to publish guidance on upgrading information systems to post-quantum cryptography within 180 days after enactment. The guidance would include standards and selection criteria for buying and deploying commercial post-quantum solutions and material for critical infrastructure sectors. NIST would also be required to offer technical and administrative help, test beds, and interoperability frameworks to industry sector representatives in the Quantum Economic Development Consortium if they request it. The bill would define post-quantum cryptography to include certain lattice-based algorithms in NIST FIPS Publications 203 and 204 (August 13, 2024 or successors) and modules under FIPS 140-3 used in a zero-trust architecture.
Sponsors & CoSponsors
Sponsor
Peters, Gary C. [D-MI]
MI • D
Cosponsors
Sen. Blackburn, Marsha [R-TN]
TN • R
Sponsored 12/2/2025
Roll Call Votes
No roll call votes available for this bill.
View on Congress.gov