Analysis of encryption and cryptography

The advent of a quantum computer poses a significant threat to all organisations, across every sector. Yet too few of them grasp the urgency of preparing for it, in particular by begining a transition to post-quantum cryptography (PQC).

The cyber ecosystem faces a twofold challenge in this area :

• Raising awareness among organisations so that they begin their migration to quantum-resistant solutions without delay;
• Expanding the market offering by ensuring the availability of products compatible with post-quantum cryptography.

This high-level risk analysis of encryption and other uses of cryptography is intended for entities that use cryptographic solutions but are not specialists in the field. It complements the documentation already available in France and internationally, which is primarly aimed at experts and suppliers.

This document provides an overview of the risks and business impacts. It proposes a simple prioritisation method along with associated recommendations that can be acted on immediately. The appendices provides a glossary and set out the prioritisation method in detail, offering assessment criteria to guide organisations.