The National Cybersecurity Agency of France (ANSSI) has published its comprehensive strategic roadmap for Post-Quantum Cryptography (PQC) migration, signaling a major commitment to national digital sovereignty. As the potential for cryptographically relevant quantum computers looms on the horizon, the French government is mandating a phased transition of all critical infrastructure and government communications to quantum-resistant standards. This initiative is designed to counter the ‘harvest now, decrypt later’ threat, where adversaries collect encrypted data today with the intention of cracking it once quantum technology matures.
The roadmap outlines specific milestones for various sectors, with a hard deadline for full compliance by 2028. It prioritizes the implementation of NIST-standardized algorithms and emphasizes the need for ‘crypto-agility’—the ability of systems to quickly update their cryptographic protocols as new threats and standards emerge. ANSSI’s approach is not just about technical defense; it is about ensuring that French and European institutions maintain control over their data and communications in an increasingly volatile global landscape.
This move by ANSSI is part of a broader European trend toward strategic digital autonomy. By setting clear standards and timelines, France is positioning itself as a leader in quantum security. The roadmap also serves as a call to action for the private sector, particularly in finance and telecommunications, to accelerate their own PQC readiness. As the global race for quantum supremacy intensifies, the implementation of robust, quantum-resistant security measures has become a fundamental pillar of national security.