← All countries

France

EU roadmap Standard-contextualiser

France's transition is led by ANSSI, the national cybersecurity authority, which treats post-quantum cryptography as the most promising defence against the quantum threat and now urges organisations across all sectors to migrate without delay. ANSSI sets out a phased approach in which standalone post-quantum deployments follow earlier hybrid phases, and in early 2026 it published concrete transition guidance for TLS 1.3, SSHv2 and IPsec alongside an updated cryptographic mechanisms guide that adds post-quantum signature and key-establishment rules. The posture is reinforced by binding national instruments, including the 2024 to 2030 military programming law, which names the move to post-quantum cryptography as a defence priority, and the France 2030 call for projects that funds a domestic post-quantum offer. The first security visas covering products with post-quantum cryptography have now been issued. In the financial sector the ACPR and the Banque de France are raising awareness and advancing a coordinated roadmap, and France aligns its timetable with the EU coordinated implementation roadmap.

Governance credibility

Governance credibility for FranceA six-axis reading out of two: Relevance 2.0 / 2, Coherence 2.0 / 2, Effectiveness 1.5 / 2, Efficiency 2.0 / 2, Governance 2.0 / 2, Impact 2.0 / 2.RelCohEffEff.GovImp
Governance credibility scores for France, each out of two. Hover or focus a row to highlight its axis.
CriterionScoreConfidence
Relevance2.0 / 2High
Coherence2.0 / 2High
Effectiveness1.5 / 2High
Efficiency2.0 / 2High
Governance2.0 / 2High
Impact2.0 / 2High

Regulatory basis

  • Law No. 2023-703 of 1 August 2023, military programming 2024-2030 (PQC transition named a defence technology priority) national Binding law
  • Order of 17 March 2022 approving the France 2030 'Cryptographie Post-Quantique' call for projects specifications national Binding law
  • ANSSI PQC migration position and roadmap (phased approach; alignment with the EU coordinated roadmap) national Guidance
  • ANSSI Common Criteria security visa with PQC requirements (first PQC security visas issued) national Binding (market access)

Essential and important entities must use state-of-the-art cryptography under NIS2; products seeking ANSSI certification must meet its PQC requirements, including mandatory hybridisation, by the visa deadlines (2027 sensitive products, 2030 all certified products).

Standards and algorithms

No standards or algorithms specified.

Hybrid stance

Required

Migration timeline

today
2022
2030
2035
20252036
  1. 2022France 2030 'Cryptographie Post-Quantique' call for projects launched
  2. 2030High-risk and sensitive use cases migrated (EU coordinated roadmap)
  3. 2035Migration of all systems complete (EU coordinated roadmap)

Target completion: 2035

International standards processes

  • NIS Cooperation Group co-authored the EU coordinated PQC roadmap
  • EU PQC Work Stream contributed to the coordinated implementation roadmap, republished by ANSSI

Governmental and standards bodies

  • ANSSI French national cybersecurity authority
  • ACPR French banking and insurance supervisor raising PQC awareness in the financial ecosystem
  • Banque de France central bank advancing a coordinated PQC roadmap for the financial sector and running PQC experiments
  • OPECST parliamentary office for the evaluation of scientific and technological choices

Key institutional documents

Advising on this transition, or your own sector's? Request a briefing →