The French National Cybersecurity Agency (ANSSI) has released a definitive roadmap mandating the transition of all critical national infrastructure to Post-Quantum Cryptography (PQC) by 2028. This move is a proactive response to the emerging threat of quantum computers capable of breaking current encryption standards. The roadmap focuses on securing essential services, including the energy grid, telecommunications networks, and government communication channels, ensuring national sovereignty and data integrity against ‘Harvest Now, Decrypt Later’ attacks by sophisticated actors.
Implementation of the PQC roadmap will require a massive upgrade of both hardware and software across the public and private sectors. ANSSI has provided a list of approved quantum-resistant algorithms, aligning with international standards set by NIST, but tailored for the specific security requirements of the French state. The agency will provide technical guidance and financial incentives for companies in regulated sectors to accelerate their migration, emphasizing the need for ‘crypto-agility’—the ability to quickly update cryptographic protocols as new threats emerge.
This mandate positions France as a global leader in the race to secure digital infrastructure against the quantum threat. Other EU nations are expected to follow suit, potentially leading to a unified European standard for post-quantum security. As the world moves closer to the ‘Q-Day’—the point when quantum computers can crack classical encryption—the ANSSI roadmap serves as a critical blueprint for protecting sensitive data and maintaining the stability of the global digital economy in the decades to come.