France's Anssi Will Block PQC-Free Products from Certification Starting 2027
5 hours ago
- France's ANSSI will stop certifying security products lacking quantum-resistant encryption starting in 2027.
- Businesses are advised to purchase only quantum-safe products by 2030, as per ANSSI's chief of staff.
- ANSSI certification is mandatory for access to French government and critical infrastructure markets.
- The policy addresses 'Harvest Now, Decrypt Later' attacks, where encrypted data is stored for future quantum decryption.
- Industry demand for post-quantum cryptography (PQC) products is accelerating, with banks and public services assessing exposure.
- ANSSI's 2027 deadline parallels the NSA's CNSA 2.0 procurement gate, creating pressure on vendors across jurisdictions.
- ANSSI recommends hybrid PQC (combining classical and quantum algorithms), a stricter requirement than the NSA's approach.
- France's 2027 cutoff runs ahead of the EU's 2030 target for high-risk systems, positioning France as a leader in enforcement.
- Multinational vendors face compliance challenges from differing PQC standards in the U.S., France, and Germany.
- A 2025 study found that most organizations lack post-quantum transition plans, highlighting a significant preparedness gap.