For the past few years, "quantum threat" lived mostly in academic papers and side panels at security conferences. That began to shift on Monday. France's national cybersecurity agency ANSSI announced it will stop certifying security products that lack quantum-resistant encryption—starting in 2027, with a full business transition deadline set for 2030. "It's not only a technical issue. It's a matter of governance, industrial planning, regulation, and sovereignty," said Samih Souissi, ANSSI's chief of staff, at the France Quantum conference in Paris.
The problem for crypto is structural. Bitcoin—and virtually every major blockchain—relies on elliptic curve cryptography (ECC) for signing transactions and securing wallets. A sufficiently powerful quantum computer could theoretically derive a private key from a public address, draining any wallet whose key has ever been visible on-chain. Glassnode's May analysis put roughly 1.92 million BTC—nearly 10% of total supply—in the "structurally vulnerable" category. Project Eleven's broader estimate covers around 7 million BTC. Both firms estimate a cryptographically relevant quantum computer could emerge as early as 2030.
What gives France's decision weight is the institutional context. ANSSI certification is mandatory for French government contracts and critical infrastructure deployments, making this a hard commercial deadline, not an advisory. France isn't moving alone. The U.S. National Security Agency's CNSA 2.0 standard already requires quantum-safe algorithms for national security systems by January 1, 2027—the same cutoff France just announced. Google has set 2029 as its internal migration target.
The crypto industry is responding, though unevenly. Algorand has already deployed quantum-resistant cryptography. The Ethereum Foundation formed a dedicated post-quantum security team. Coinbase launched a quantum advisory council, urging blockchain builders to start planning migrations. Stellar, Aptos, and Solana all have signature upgrade roadmaps underway. Bitcoin faces the steepest path—any protocol-level changes require broad community consensus, which is harder to coordinate than in networks with clearer governance structures.
An actual quantum attack on Bitcoin isn't possible today—the hardware simply doesn't exist yet. But migrating to post-quantum algorithms isn't an overnight update. It takes years of development, testing, and network-wide coordination. Two of the world's largest government cybersecurity bodies just named 2027 as their hard line. For the crypto market, this is no longer a distant theoretical signal. There's a clock running now.
