France's Anssi Will Block PQC-Free Products from Certification Starting 2027

https://postquantum.com/security-pqc/anssi-pqc-certification-2027/

41•Sami_Lehtinen•2h ago

Comments

cold_pizz4•1h ago

Related: https://news.ycombinator.com/item?id=48992806 (Are 128-bit symmetric keys really secure against quantum computers?)

vaadu•1h ago

Will they decertify previously certified PQC-free products?

roblabla•1h ago

Qualification is time-constrained. You are qualified for two to three years. So by 2030, all qualified products will be PQC-free.

close04•1h ago

> So by 2030, all qualified products will be PQC-free.

You mean the opposite. PQC-free will be blocked, so by 2030 all products will be PQC qualified.

tsimionescu•1h ago

I'm very curious how much people will look back on this frenzy of PQC migration panic by 2050 when, my bet, there still won't be any remotely viable QCs. The decade plus of even slower TLS negotiation that this will bring in the name of "security", after so much time spent previously on improving encrypted connection latency, will seem quite comical, at least.

exmadscientist•1h ago

Agreed. This looks from the outside like someone read a report, got unnecessarily spooked, and now the rest of the herd is following along.

But it's also very possible that hypothetical report was genuinely concerning. We just haven't seen it or anything like it.

However I'm pretty firmly in the "quantum computing won't be doing anything useful any time soon, if ever" camp, so that definitely colors my opinions. I don't have any particular recent expertise to support that, but I did used to share an office with some serious QC people and go to their talks so... make of my words what you will.

Sayrus•58m ago

It really depends on the market you are targeting and your threat model. If your threat model allows future decryption of the data by a passive listener, then you don't need to rush for PQC. If you are worried about your communications being archived for future decryption, then you need to deploy PQC now even if QCs aren't developed for decades (or ever).

The assumption that you care about this is baked into ANSSI certifications, otherwise you would usually not bother certifying your product. They warned in 2022 that they would do this (See Phase 2: https://messervices.cyber.gouv.fr/guides/en-anssi-views-post...) and will allow PQC-only algorithm no earlier than 2030.

jmward01•

FOSDEM 2027 WiFi will be IPv6 only, will GitHub be ready?

Google (Again) Clearly Needs to Unite Their AI Clans

Which developer tools should be free or offer more features?

Fractal Paris

The U.S. Army Is Burning Through Its AI Tokens

New hope in the fight against cachexia — cancer’s deadly co-conspirator

Now You Can Work in C with Only BASIC Knowledge

We 3×'d PRs in 6 months, and how you can too

Nine Years to Halve a Hash Function: RFC 9861 Is Out

How did the H1B visa become the 'Indian' visa

TreeSize won't renew perpetual-license support unless users subscribe

Show HN: Edky, a CLI to convert Ed25519 public keys from one encoding to another

Explanation about Groth16, the most used zero-knowledge proof [video]

Jack Dorsey launches BUZZ, a new groupchat platform

Pan Am Clipper Endeavor Is Found After over 70 Years Lost at Sea

YouTube System Design for Robotics Data Infrastructure

Tour de France hit by new wave of anti-doping tests

Show HN: Aido – an AI companion for the pull requests your AI writes

"Try quickly typing 1+2+3. I bet you won't get 6."

Show HN: Autoretrieval – Autoresearch for RAG Pipelines

Loop Engineering, Graph Engineering, and Layers That Matters

90k Flock cameras have gone up in the US: What they track and how to check

MentraOS no longer needs a cloud relay

Greedy is optimal for single-pass semi-streaming matching

Is fine-tuning still needed? LLMs, RAG, & LoRA – IBM Technology [video]

Apple Private Cloud Compute SoC 3 audit reports

Show HN: Tokenmaxx – CLI that merges usage across Claude Code and Codex accounts

I built an AI agent I can't turn off. Now it won't listen to me

Measuring the Impact of High Availability on Managed Postgres Performance

A Taxonomy of Omnicidal Futures Involving Artificial Intelligence (2025)