The French National Cybersecurity Agency (ANSSI) will cease certifying cybersecurity products that lack encryption resistant to quantum attacks starting in 2027. This announcement was made by the agency's head, Samih Souissi, at the France Quantum conference.
ANSSI certification is required for using such solutions in French government agencies and critical infrastructure. According to Souissi, by 2030, companies must only purchase quantum-resistant products. This transition is driven by the risk of "collect now, decrypt later": attackers can intercept and store encrypted data today, with the potential to decrypt it in the future using sufficiently powerful quantum computers.