France mandates quantum‑secure encryption for security products and financial assets

France’s national cybersecurity agency ANSSI announced that, from 2027, security products used by public authorities and critical‑infrastructure operators must incorporate quantum‑resistant encryption to receive certification. Products lacking post‑quantum protection will no longer be eligible for the ANSSI seal, effectively barring their use in government procurement. The agency set a further target for 2030, by which all critical‑infrastructure operators should have fully transitioned to post‑quantum cryptography.

The plan also extends to the financial sector, requiring securities, clearing systems and custodial frameworks to adopt quantum‑resistant protocols. France aims to pre‑empt future “harvest‑now, decrypt‑later” attacks by quantum computers, and backs the policy with a €3 billion national investment programme in quantum technologies. Industry groups note rising demand for post‑quantum solutions but warn that the timeline may impose significant upgrade costs, especially for smaller issuers, while regulators argue the early standardisation will protect market stability.

The move positions France among the most proactive European governments on quantum‑security policy, with potential ripple effects for EU‑wide financial regulation and global market participants.