法国国家网络安全机构ANSSI宣布,自2027年起将停止对不支持后量子密码学(PQC)的安全产品进行认证[1]。该决定由ANSSI首席幕僚长Samih Souissi在巴黎France Quantum 2026会议上宣布[1]。
ANSSI认证是法国政府机构和关键基础设施运营商部署安全产品的前置条件,失去认证资格意味着企业将无法进入欧洲最大政府技术市场之一[1]。同时,ANSSI建议企业到2030年前仅采购具备量子安全特性的产品[1]。Souissi表示,"这不仅是技术问题,也是治理、产业规划、监管和主权的问题"[1]。
ANSSI的典型认证周期为12至18个月[1]。该举措与美国国家安全局(NSA)的政策相呼应——NSA的CNSA 2.0采购规定也在2027年1月1日要求所有新的国家安全系统支持CNSA 2.0算法[1]。
这一决定是更广泛量子密码学转型计划的一部分。法国2021年启动的国家量子战略承诺四年内投入18亿欧元的公私资金[1]。2025年5月发布的欧盟《商定密码机制v2》规定基于LWE和MLWE的机制"不应单独使用"[1]。欧盟同月发布的协调实施路线图设定了三个关键里程碑:2026年底前制定国家过渡计划、2030年底前完成高风险系统迁移、2035年底前实现完全迁移[1]。
France's National Cybersecurity Agency (ANSSI) announced that it will cease certifying security products lacking post-quantum cryptography capabilities beginning in 2027 [1]. The declaration was made by Samih Souissi, ANSSI's chief of staff, at the France Quantum 2026 conference in Paris, framing the move as a matter of governance, industrial planning, regulation, and national sovereignty [1].
ANSSI certification serves as a prerequisite for French government agencies and critical infrastructure operators to deploy security products, making loss of certification status equivalent to exclusion from one of Europe's largest government technology markets [1]. The agency's typical certification process requires 12 to 18 months [1].
The transition timeline reflects broader international coordination. ANSSI recommends that organizations purchase only quantum-safe products by 2030 [1]. This aligns with the U.S. National Security Agency's CNSA 2.0 procurement threshold, which requires all new national security systems to support CNSA 2.0 algorithms starting January 1, 2027 [1].
At the European level, the Agreed Cryptographic Mechanisms v2, released in May 2025 by the EU Cybersecurity Certification Group, stipulates that mechanisms based on LWE and MLWE "must not be used in isolation" [1]. An EU coordinated implementation roadmap released the same month establishes three milestones: national transition plans by the end of 2026, migration of high-risk systems by the end of 2030, and complete migration by the end of 2035 [1].
France has prioritized quantum security infrastructure through its national quantum strategy launched in 2021, committing 1.8 billion euros in public and private funding over four years [1].