France's national cybersecurity agency ANSSI will stop certifying security products that lack post-quantum cryptography (PQC) starting in 2027, making it one of the most aggressive national stances on quantum-safe encryption. Products used by French government agencies and critical infrastructure must comply, and businesses are expected to buy only quantum-safe products by 2030. The move comes amid growing concern that Q-Day — when quantum computers can break current encryption — could arrive as early as 2029 according to Google. Despite looming deadlines, a Trusted Computing Group survey found 91% of US and European security professionals have no formal PQC roadmap. Experts warn that 'harvest now, decrypt later' attacks are already underway, and that transitioning to PQC is a long-term discipline, not a quick fix. France is simultaneously investing $1.15 billion in quantum computing development.
