France Mandates Quantum-Proof Encryption by 2027

France's national cybersecurity agency, ANSSI, has announced a significant policy change requiring all security products to feature quantum-resistant encryption. Effective from 2027, ANSSI will no longer certify products that do not meet this new standard. This directive will compel French government agencies and operators of critical infrastructure to transition away from older encryption systems.

Businesses are advised to exclusively procure quantum-safe products by 2030. This strategic move by ANSSI is a direct response to concerns about the 'harvest now, decrypt later' threat, where encrypted data captured today could be decrypted by advanced quantum computers in the future. The market for quantum-resistant solutions is anticipated to grow substantially as companies like Capgemini see increasing demand.

Industry experts warn that systems like the Elliptic Curve Digital Signature Algorithm (ECDSA), commonly used in blockchain, could be among the first to be compromised. Companies, including OVHcloud, face the dual challenge of auditing their existing products and securing vast amounts of data to comply with ANSSI's stringent requirements, alongside aligning with EU and US standards.