France
ExecutingANSSI's position paper on the post-quantum transition (2022, with a 2023 follow-up) requires hybrid schemes — classical plus post-quantum — for products seeking French security visas. It particularly recommends hybrid mitigation for products protecting information beyond 2030 or likely to remain in use after 2030. Protocol-level guidance now covers TLS 1.3, IPsec/IKEv2 and SSHv2.
France applies procurement and certification pressure rather than a single completion deadline; hybrid, not pure PQC, is the required form during the transition.
State information systems, certified and qualified products, and regulated critical operators (OIV/OSE)
Band rationaleOne of the most mature national implementation layers under the EU roadmap.
- 2022-03-30
ANSSI position paper dated
Sets out the hybrid-first doctrine and a provisional three-phase transition agenda.
Bindingness · guidance - 2023-12-21
Follow-up position paper dated
ANSSI accelerates its agenda and updates recommendations for algorithms and hybridisation.
Bindingness · guidance
Certification and security-visa regimes turn PQC from advice into a product-market requirement across the European supply chain.
- ·Write post-quantum capability into procurement clauses now
- ·Hybrid key exchange is the required transitional form, not an optional extra
- ·Follow certification scheme updates for shortlisted products
- A2guidanceANSSI views on the post-quantum cryptography transitionANSSIPublished 2022-03-30Reviewed 2026-09-06
- A2guidanceFollow-up position paper on the post-quantum cryptography transitionANSSIPublished 2023-12-21Reviewed 2026-09-06