France's national cybersecurity agency, ANSSI, has announced that it will stop certifying security products that lack quantum-resistant encryption starting in 2027 [1]. This decision marks a significant shift in the country's approach to post-quantum cryptography (PQC) and will have far-reaching implications for organizations operating in France. ANSSI's chief of staff, Samih Souissi, made the announcement at the France Quantum 2026 conference, emphasizing the need for businesses to purchase only quantum-safe security products by 2030 [2]. The agency's move is driven by concerns that attackers could store encrypted data today and decrypt it with future quantum computers, highlighting the importance of transitioning to PQC [3].

Industry participants at the conference noted that demand for quantum-safe security solutions is growing, with some experts warning that widely used cryptographic standards such as ECDSA could be among the first vulnerable to future quantum attacks [4]. To comply with ANSSI's new policy, organizations will need to implement quantum-resistant algorithms in a way that can be validated, certified, maintained, and trusted [5]. This will require significant investments in post-quantum cryptography and the development of new cryptographic standards. The French government's decision to stop certifying products without quantum-safe encryption is a significant step towards ensuring the security of its critical infrastructure and government agencies.

It also underscores the need for organizations to prioritize post-quantum cryptography and begin planning for the transition to PQC.

Sources

  1. https://postquantum.com/security-pqc/anssi-pqc-certification-2027/
  2. https://thequantuminsider.com/2026/06/18/france-says-it-will-wont-certify-security-products-that-arent-quantum-resistant-starting-in-2027
  3. https://securityboulevard.com/2026/06/france-to-stop-certifying-products-without-quantum-safe-encryption-in-2027
  4. https://it.slashdot.org/story/26/06/16/181236/france-to-stop-certifying-products-without-quantum-safe-encryption
  5. https://www.safelogic.com/blog/from-quantum-readiness-to-quantum-migration-what-frances-new-policy-means