ANSSI

ANSSI describes itself as France's national authority on cybersecurity and cyber defence, and in its position paper as the national cybersecurity authority with both an advisory and a regulatory role over cryptographic algorithms. That paper sets out three phases: mandatory pre-quantum security with optional post-quantum and no claimed quantum resistance; then, not earlier than 2025, mandatory pre-quantum security with optional post-quantum carrying a claimed quantum resistance; then, probably not earlier than 2030, optional standalone post-quantum cryptography.

It states that hybridation is mandatory for the first two phases, and that it will not endorse any direct drop-in replacement of currently used algorithms in the short to medium term, while adding that this immaturity should not serve as an argument for postponing deployments. Both halves of that sentence are load-bearing, and quoting only one of them misrepresents the position.