The Agence nationale de la sécurité des systèmes d’information (ANSSI) published a position paper on January 4, 2022, outlining its views on the post-quantum cryptography transition ANSSI views on the Post-Quantum Cryptography transition. The document recalls the quantum threat context and introduces a provisional transition agenda to prevent quantum threats through progressive assurance increases on new post-quantum algorithms.
ANSSI recommends a three-phase roadmap. Phase one emphasizes hybrid mechanisms combining pre-quantum and post-quantum algorithms. Phase two, beginning not earlier than 2025, maintains mandatory hybridation with claimed quantum resistance. Phase three, probably not earlier than 2030, allows optional standalone post-quantum cryptography.
The guidance states that first French security certifications for products implementing hybrid post-quantum cryptography are expected around 2024 or 2025. ANSSI’s role includes advisory functions on cryptographic algorithm selection and regulatory supervision of security evaluations for Common Criteria certifications.