From 2027, the French cybersecurity agency ANSSI will stop certifying security products that do not feature quantum-resistant encryption, effectively forcing government agencies and critical infrastructure operators to phase out older cryptographic systems.
Reuters reports :
Samih Souissi, ANSSI's chief of staff, told the France Quantum conference that the agency will stop such certifications from 2027 and that businesses will have to buy only quantum-safe products by 2030.
Approval from ANSSI will be required for use in French government agencies and critical infrastructure, making the policy a de facto phase-out of legacy encryption.
“It’s not just a technical issue,” Souissi said.
“It’s a matter of governance, industrial design, regulation and sovereignty.”
The move reflects his concern that attackers might store encrypted data now and unlock it later, when quantum computers become powerful enough to break current protections, a risk known as “harvest now, decrypt later.”
Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.
