France sets 2030 as the limit to shield its public data from the quantum threat

The French Nationwide Data Techniques Safety Company (ANSSI) revealed on April 9 the French State’s cybersecurity roadmap for 2026-2027, which features a chapter devoted to the transition to post-quantum cryptography with particular deadlines for all ministries.

Based on the doc, data methods that course of labeled information should function with post-quantum cryptography earlier than the tip of 2030and from that yr onwards solely encryption merchandise that incorporate this safety might be deployed.

The roadmap establishes three levels previous to that closing deadline:

• Earlier than the tip of 2026every ministry might want to stock its sturdy and delicate information to establish which of them require precedence post-quantum safety.

• Earlier than the tip of 2027should establish the affected technical elements, corresponding to encryption and digital signature methods.

• And earlier than the tip of 2030should full the deployment of post-quantum cryptography in all methods that course of labeled data.

Why is France appearing now?

The ANSSI doc cites two causes for appearing earlier than quantum {hardware} exists. The primary is the time required for a migration of that scale. Updating the cryptography of a State’s whole infrastructure is a course of that, based on the doc, “should be anticipated and began now.”

The second is the chance often known as «harvest now, decrypt later» (retailer now, decrypt later): The apply whereby malicious actors seize encrypted information right now with the intention of decrypting it once they have adequate quantum {hardware}. That danger exists no matter when Q-Day arrives.

With this roadmap, France joins establishments corresponding to Google, which introduced that it’s focusing on 2029 emigrate its personal infrastructure, and america Nationwide Institute of Requirements and Know-how (NIST), which set post-quantum migration deadlines for 2030 and 2035, as reported by CriptoNoticias.