France's national cybersecurity agency, ANSSI, has announced a significant policy shift that will phase out the certification of encryption products not resistant to quantum computing. This move is expected to compel French government bodies and operators of critical infrastructure to transition to quantum-safe encryption solutions.
The agency stated that it will cease certifying security products that do not incorporate quantum-resistant encryption starting in 2027. This deadline provides a clear timeline for vendors and organizations to adapt their systems and procure new technologies.
Samih Souissi, ANSSI's chief of staff, communicated this decision at the France Quantum conference. He further advised that businesses should aim to be exclusively using quantum-safe products by the year 2030.
ANSSI certification is a mandatory requirement for the deployment of security products within French government agencies and across sectors deemed critical infrastructure. Consequently, this new policy effectively signals a gradual but firm phase-out of encryption technologies vulnerable to future quantum attacks.
The transition to post-quantum cryptography is a global concern as the development of powerful quantum computers could render current encryption standards obsolete, potentially compromising sensitive data. France's proactive stance aims to preemptively address this future threat.
By setting these deadlines, ANSSI is encouraging the market to accelerate the development and adoption of encryption algorithms designed to withstand the computational power of quantum computers. This includes exploring and implementing new cryptographic primitives that are not susceptible to known quantum algorithms.
Organizations that rely on ANSSI-certified products will need to plan for the upgrade or replacement of their existing encryption systems to ensure continued compliance and security. The agency's announcement serves as a critical signal for strategic planning and investment in future-proof security measures.
While specific technical standards for post-quantum cryptography are still evolving internationally, ANSSI's directive emphasizes the urgency of preparing for this technological shift. This policy will likely influence procurement decisions and cybersecurity strategies across various sectors in France.
