France's national cybersecurity agency, ANSSI, will cease certifying security products that do not incorporate quantum-resistant encryption starting in 2027. This mandate, announced by ANSSI's chief of staff, Samih Souissi, at the France Quantum 2026 conference, signifies a critical deadline for vendors seeking to access the French government and critical infrastructure markets.

Souissi emphasized that this is not solely a technical issue but also concerns governance, industrial planning, and national sovereignty. The move addresses the growing threat of "Harvest Now, Decrypt Later" attacks, where adversaries store encrypted data today to decrypt it with future quantum computers. Businesses are advised to exclusively purchase quantum-safe products by 2030.

This ANSSI deadline aligns with the NSA's CNSA 2.0 procurement requirements, creating a dual deadline for vendors serving both US and French government markets. The agency also strongly recommends hybrid implementations, combining classical and post-quantum algorithms, for enhanced security, a stricter approach than some international standards.