France to phase out non-quantum-safe encryption in government and critical infrastructure

France’s cybersecurity agency, ANSSI, announced it will stop certifying security products that lack quantum-resistant encryption beginning in 2027. The decision was disclosed by Samih Souissi, ANSSI’s chief of staff, during the France Quantum conference. ANSSI’s certification is mandatory for products used in French government agencies and critical infrastructure, effectively mandating a shift away from older, non-quantum-safe encryption systems.

The agency also set a target for businesses to adopt only quantum-safe products by 2030. This timeline aligns with growing concerns over the potential of quantum computers to render widely used encryption methods obsolete. The policy represents a significant step in France’s broader strategy to modernize its cryptographic infrastructure and mitigate future risks posed by quantum computing advancements.