France Mandates Quantum-Safe Encryption for Critical Infrastructure by 2027
France's national cybersecurity agency, **ANSSI**, has announced a critical shift in its certification policy, mandating the adoption of quantum-resistant encryption for all new security products by 2027. This proactive measure aims to future-proof the nation's government and critical infrastructure against the looming threat of quantum computing.
In a significant move to bolster national cybersecurity, **ANSSI** (Agence Nationale de la Sécurité des Systèmes d'Information), France's cybersecurity agency, has declared it will cease certifying security products that lack quantum-resistant encryption starting in 2027.
This directive, outlined by **Samih Souissi**, **ANSSI**'s Chief of Staff, at the France Quantum conference, will effectively force government bodies and critical operators to transition away from older, vulnerable cryptographic systems.
### The Quantum Threat and Proactive Measures
The emergence of quantum computing poses a long-term threat to current cryptographic standards, potentially rendering widely used encryption algorithms obsolete. **ANSSI**'s announcement signals a clear intent to address this 'harvest now, decrypt later' threat, where adversaries might collect encrypted data today with the expectation of decrypting it once quantum computers become powerful enough.
### Certification as a Catalyst for Change
**ANSSI** approval is a mandatory requirement for security products deployed within French government agencies and critical national infrastructure. By withdrawing certification for non-quantum-safe products, the agency is implementing a de facto phase-out of legacy encryption, compelling organizations to adopt more robust, quantum-resistant solutions.
### A Phased Transition
While the certification halt begins in 2027, **Souissi** further advised that businesses should be exclusively purchasing quantum-safe products by 2030. This phased approach provides a clear roadmap for organizations to plan and execute their transition to post-quantum cryptography, ensuring a secure digital future for France's most vital sectors.