France to Stop Certifying Non-Quantum-Safe Encryption - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog France to Stop Certifying Non-Quantum-Safe Encryption France is accelerating its transition to post-quantum encryption: France’s cybersecurity agency ANSSI said on Tuesday it would stop certifying security products that lack quantum-resistant encryption, a move that will force government bodies and critical operators to shift away from older systems. Samih Souissi, ANSSI’s chief of staff, said at the France Quantum conference that the agency would halt such certifications from 2027, and that businesses should be buying only quantum-safe products by 2030. ANSSI approval is required for use in French government agencies and critical infrastructure, making the policy a de facto phase-out of older encryption. Tags: certifications , encryption , France , quantum cryptography Posted on July 6, 2026 at 6:45 AM • 7 Comments Comments Clive Robinson • July 6, 2026 12:09 PM @ ALL, This, “France is accelerating its transition to post-quantum encryption” Does not realy give an indicator of just how fast the chang required or the effect it will have. ANSSI dictating from above “ANSSI’s chief of staff, said at the France Quantum conference that the agency would halt such certifications from 2027, and that businesses should be buying only quantum-safe products by 2030.” What is in effect a deadline of “at the end of the decade” when we are already more than halfway through. Some would argue is, “Way to fast for what in practice is an unknown, at best minimally tested technology”. Especially when the alleged “Quantum Computer” threat keeps slipping further and further into the future. Thus the question arises as to, “Why the rush, and what the parachute is?” After all you do not fly experimental aircraft without having some form of protection from “crash and burn”. If you are going to create a massive economic upheaval it’s something you need to consider the consequences of. Just one thing that few talk about is “Sovereign Security”. It’s all the rage currently to talk about the EU plans to get rid of US Cloud as it’s a clear and present security risk. But few consider the effect across “the full computing stack”. Presently the cloud world runs on US controlled hardware… France does not have the Sovereign Secure production to meet this ANSSI plan. Which means both the US and China will be “built in at the bottom of the computing stack for these Quantum Safe encryption systems… But speaking of hardware, people need to seriously think about the threat model of QC. The current argument is that all comms will be hovered up and kept then when QC becomes practical it will all be “broken” (with the implication of “over night”). Simple logic and the exponential rise of communications tells you this is not going to happen. Before you even chuck in the economic cost of building Data Centers full of Quantum Computers and all that’s involved with that. It’s also fate that is fairly easy to avoid using pre-encryption or super-encryption depending on which way you look at things. Further you need to ask the question, Where would QC’s be most advantageous at breaking, that is where would the “exponential” speed up be? The answer is “Key Negotiation / Delivery / Distribution” which is actually not a problem that existed untill the 1980’s and the advent of what would become e-shopping On-Line. Pre-E-Commerce encryption practices are still QC proof. Thus there are two types of encryption, E-Commerce style between random entities, and traditional between established relationship entities. After a moments thought you realise that the real “long term” security concerns are between entities that can use Pre-E-Commerce style systems. Thus basic engineering would make secure systems for established entities. But getting back to Quantum Computers the promise is “exponential speed up”… Can that actually be delivered by Quantum Computing? The answer in most cases is “no” whilst we might have QC Hardware, we will still need QC Algorithms to get that exponential speed up. And such algorithms are actually at best very thin on the ground. You can see a basic explanation of this in ‘https://m.youtube.com/watch?v=pDj1QhPOVBo The thing to remember is, “There is a lot of difference between ‘theoretical and practical’.” Whilst an algorithm can be designed in theory… it is in effect useless untill it can be adapted to run on available hardware… So the question is, “Why is ANSSI jumping into something with time frames that will give the opposite of Sovereign Security?” Locutus de Borges • July 6, 2026 12:12 PM Votre résistance est vaine — vous serez déchiffré. lurker • July 6, 2026 1:37 PM “France is accelerating its transition to post-quantum encryption” Encore un fois ils mettent la charrette avant le chevaux. How can we have post-quantum anything when we haven’t yet had quantum? Not really anonymous • July 6, 2026 5:12 PM Is France really trying to improve security or are they trying to weaken it? France historically has been anti-encryption, so it wouldn’t surprise me if they are actually trying to make security worse. (As the NSA appears to be doing right now.) TER0RR1STS in idah0 Government • July 6, 2026 5:50 PM Meanwhile in a p00ph0l3 called 1dah0…. The TERRORISTS in 1deh0 HAVE TAKEN OVER THE LAW ENFORCEMENT AND JUDICIAL BRANCH AND HAVE DELIBERATELY, WITH THEIR HATE, LIES, AND COVERUPS DESTROYED A DECENT AND LAW-ABIDING FAMILY. See here for details: s h o r t u r l . at / M D v F x Please guys, if any one of you knows of an attorney with credentials to represent clients in the Supreme Court of the United States (SCOTUS) – please share this with them and have them contact me in case they see and recognize this tragedy and discrimination which resulted in the destruction of a decent, law-abiding American man and his family. s h o r t u r l . at / M D v F x Let us bankrupt the State of Idaho for NOT RESPECTING THE RULE OF LAW/Ev1dence BY USING FAKE EV1DENCE AND LIES OF FAKE VICTIMS TO DESTROY ME AND MY FAMILY! I am willing to sign a document that will promise 50-50 monetary compensation when disbursing the damages awarded to me between me and my Attorney. We’ll split it halfway, no matter the amount. Please guys. Thank you very much. s h o r t u r l . at / M D v F x • July 6, 2026 6:00 PM Prosecutors and Boise Police Department Officers have FAKED THE EVIDENCE OF AN ATTEMPTED MURDER – AND DESTROYED AN INNOCENT AMERICAN CITIZEN AND HIS FAMILY BY MAKING HIM A FELON while USING FAKE EVIDENCE AND LYING UNDER OATH. THESE TERRORISTS IN OUR GOVERNMENT ARE THE REAL THREAT TO THE FREEDOM AND WELLBEING OF EVERY INNOCENT AMERICAN CITIZEN AND YOU SHOULD CARE!!!! THE TYRANNY MUST STOP!!!! THE TERRORISTS IN OUR GOVERNMENT MUST BE EXPOSED NOW!!!!! THEY ARE COVERING UP FOR ONE ANOTHER WHILE BEING FINANCED BY WE THE PEOPLE!!! WHEN YOU SHOW ME ALL THE GAG ORDERS AGAINST ME YOU SIGNED OFF ON THEN WE WILL SEE WHO IS DELUSIONAL – YOU!!! The TERRORISTS WHO HAVE BEEN TERRORIZING ME AND MY FAMILY FOR MANY YEARS NOW!!!!! L0SERS! s h o r t u r l . at / M D v F x KC • July 6, 2026 6:53 PM @lurker Maybe we’ll know when quantum is here when cryptocurrency HODLers ring the alarm 🙂 https://postquantum.com/security-pqc/anssi-pqc-certification-2027/ “Separately, Qperfect warned that the Elliptic Curve Digital Signature Algorithm (ECDSA), widely used in blockchain systems, could be among the earliest targets for quantum attacks.” Interesting that ANSSI is using hybrid approaches for signatures beyond what the NSA is. Subscribe to comments on this entry Leave a comment Cancel reply Blog moderation policy Login Name Email URL: Remember personal info? Fill in the blank: the name of this blog is Schneier on ___________ (required): Comments: Allowed HTML <a href="URL"> • <em> <cite> <i> • <strong> <b> • <sub> <sup> • <ul> <ol> <li> • <blockquote> <pre> Markdown Extra syntax via https://michelf.ca/projects/php-markdown/extra/ Notify me of follow-up comments by email. Notify me of new posts by email. Δ ← Flock Cameras Can Surveil Cars Without License Plates Sidebar photo of Bruce Schneier by Joe MacInnis. Powered by WordPress Hosted by Pressable About Bruce Schneier I am a public-interest technologist , working at the intersection of security, technology, and people. I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998. I'm a fellow and lecturer at Harvard's Kennedy School , a board member of EFF , and the Chief of Security Architecture at Inrupt, Inc. This personal website expresses the opinions of none of those organizations. Contact Info Related Entries Factoring RSA Keys with Many Zeros Hong Kong Police Can Force You to Reveal Your Encryption Keys New Mexico's Meta Ruling and Encryption Inventors of Quantum Cryptography Win Turing Award IoT Hack Featured Essays Four Ways AI Is Being Used to Strengthen Democracies Worldwide The CrowdStrike Outage and Market-Driven Brittleness How Online Privacy Is Like Fishing How AI Will Change Democracy Seeing Like a Data Structure LLMs’ Data-Control Path Insecurity AI and Trust The Value of Encryption The Eternal Value of Privacy Terrorists Don't Do Movie Plots More Essays Blog Archives Archive by Month 100 Latest Comments Blog Tags 3d printers 9/11 A Hacker's Mind Aaron Swartz academic academic papers accountability ACLU activism Adobe advanced persistent threats advertising adware AES Afghanistan AI air marshals air travel airgaps al Qaeda alarms algorithms alibis Amazon Android anonymity Anonymous antivirus Apache Apple More Tags Latest Book More Books Blog Newsletter Books Essays News Talks Academic About Me

📌 来源: Schneier on Security | 📅 2026-07-06