France to Cease Certifying Products Without Quantum-Resistant Encryption
France's cybersecurity agency, ANSSI, has announced that it will no longer certify security products lacking quantum-resistant encryption, effective from 2027. This decision will mandate government agencies and critical infrastructure operators to transition away from older cryptographic systems. Businesses are advised by ANSSI to procure only quantum-safe products by 2030 to mitigate the risk of future quantum computing attacks that could compromise currently encrypted data.
France's cybersecurity agency, ANSSI, will stop certifying security products that do not incorporate quantum-resistant encryption starting in 2027. This policy change will effectively require government agencies and operators of critical infrastructure to discontinue the use of older cryptographic systems.
Samih Souissi, ANSSI's chief of staff, announced at the France Quantum conference that the agency plans to halt such certifications from 2027. He further advised that businesses should be exclusively purchasing quantum-safe products by 2030. ANSSI approval is a prerequisite for products utilized within French government agencies and critical infrastructure, making this initiative a de facto phase-out of legacy encryption methods.
The decision stems from concerns regarding a risk known as "harvest now, decrypt later." This scenario involves attackers storing currently encrypted data with the intention of decrypting it later when quantum computers become powerful enough to bypass contemporary protections. Souissi emphasized that this initiative is not solely a technical matter, but also encompasses governance, industrial planning, regulation, and national sovereignty.
(Source: Slashdot)
