France plans to end certification for products lacking quantum-resistant encryption

France is preparing to change the way it evaluates security products by phasing out certification for systems that do not include quantum-resistant encryption. According to the reports, the country’s cybersecurity agency intends to begin blocking certification for such products in 2027, with full adoption of the new approach targeted for 2030.

The move reflects growing concern inside the cybersecurity field that advances in quantum computing could eventually weaken widely used forms of encryption. Quantum-resistant, or post-quantum, encryption is designed to remain secure against attacks from machines capable of handling calculations beyond the reach of current computers. French authorities are now moving to make that protection a requirement rather than an optional feature in the certification process.

The policy shift was described as a decision by French government cybersecurity researchers and related agencies to stop certifying security products that do not meet the new standard. In practical terms, that means vendors seeking official approval in France will need to show that their products are built with encryption methods intended to withstand future quantum threats. The sources did not name specific product categories or list which certification frameworks would be affected.

The timeline in the reports gives the industry several years to adjust. Certification changes are expected to begin in 2027, while the broader goal is to have the transition fully in place by 2030. That staggered schedule suggests French officials are trying to give manufacturers and other stakeholders time to update existing systems, develop new products, and adapt compliance processes before the rules become fully established.

The development has also drawn attention because of its relevance to digital assets and blockchain security. One report framed the French move in the context of rising Bitcoin security concerns, indicating that the issue of quantum-resistant encryption is not limited to government or enterprise software. While the sources did not say that Bitcoin faces any immediate threat, they linked the policy change to wider discussions about how financial and cryptographic systems could be affected if quantum computing becomes powerful enough to challenge current encryption standards.

For now, the action appears to be a regulatory and standards-based response rather than an emergency measure. France is not banning existing products outright, based on the available reports, but it is setting a future requirement for certification that will exclude systems lacking quantum-resistant safeguards. That makes the country one of the more explicit national authorities to outline a transition away from older encryption approaches in official product approval, and it underscores how post-quantum security is moving from a theoretical concern to a compliance issue for technology providers.