{"d":{"__metadata":{"id":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')","uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')","type":"itsystems.Pd.DataServices.DataModel.Business"},"BusinessResponsibilities":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/BusinessResponsibilities"}},"RelatedBusinesses":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/RelatedBusinesses"}},"BusinessRoles":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/BusinessRoles"}},"Publications":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/Publications"}},"LegislativePeriods":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/LegislativePeriods"}},"Sessions":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/Sessions"}},"Preconsultations":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/Preconsultations"}},"Bills":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/Bills"}},"Councils":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/Councils"}},"BusinessTypes":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/BusinessTypes"}},"Votes":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/Votes"}},"SubjectsBusiness":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/SubjectsBusiness"}},"BusinessStates":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/BusinessStates"}},"Council":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/Council"}},"Transcripts":{"__deferred":{"uri":"https://ws.parlament.ch/OData.svc/Business(ID=20263830,Language='FR')/Transcripts"}},"ID":20263830,"Language":"FR","BusinessShortNumber":"26.3830","BusinessType":5,"BusinessTypeName":"Motion","BusinessTypeAbbreviation":"Mo.","Title":"Informatique. Pr\u00e9parer la Conf\u00e9d\u00e9ration \u00e0 la cryptographie post-quantique","Description":null,"InitialSituation":null,"Proceedings":null,"DraftText":null,"SubmittedText":"

Le Conseil f\u00e9d\u00e9ral est charg\u00e9 de modifier les prescriptions relatives \u00e0 l\u2019acquisition, au renouvellement et au d\u00e9veloppement des prestations informatiques utilis\u00e9es par la Conf\u00e9d\u00e9ration de sorte que les syst\u00e8mes relevant de la cryptographie soient progressivement r\u00e9orient\u00e9s vers la crypto-agilit\u00e9 et les capacit\u00e9s de migration post-quantique.

Il veillera notamment \u00e0 ce que :

  1. l\u2019acquisition et le renouvellement de grande ampleur de syst\u00e8mes informatiques pr\u00e9sentant un besoin de protection accru int\u00e8grent des exigences en mati\u00e8re de crypto-agilit\u00e9, documentent les d\u00e9pendances cryptographiques et pr\u00e9voient la prise en charge ult\u00e9rieure de processus post-quantiques normalis\u00e9s ; 
  2. une migration prioritaire vers des processus cryptographiques post-quantiques ou hybrides soit pr\u00e9par\u00e9e pour les donn\u00e9es sensibles et durablement confidentielles et pour les infrastructures de la Conf\u00e9d\u00e9ration essentielles pour la s\u00e9curit\u00e9 ; 
  3. les soumissionnaires des appels d\u2019offres pertinents exposent clairement quels processus, biblioth\u00e8ques, protocoles et composants de gestion de certificats et de cl\u00e9s cryptographiques seront utilis\u00e9s et comment ils pourront \u00eatre mis \u00e0 jour ou remplac\u00e9s ; 
  4. des d\u00e9rogations restent possibles si la maturit\u00e9 commerciale, l\u2019interop\u00e9rabilit\u00e9 ou la proportionnalit\u00e9 l\u2019exigent, \u00e0 condition qu\u2019elles soient limit\u00e9es, justifi\u00e9es et assorties d\u2019une \u00e9valuation des risques et de mesures de compensation appropri\u00e9es ; 
  5. la mise en \u0153uvre suive des normes et des recommandations reconnues \u00e0 l\u2019\u00e9chelle internationale et que les services comp\u00e9tents de la Conf\u00e9d\u00e9ration rendent r\u00e9guli\u00e8rement compte des progr\u00e8s r\u00e9alis\u00e9s, des risques encourus et des actions qui s\u2019imposent.
","ReasonText":"

La Conf\u00e9d\u00e9ration ach\u00e8te et exploite des syst\u00e8mes informatiques qui restent en service pendant de nombreuses ann\u00e9es. Les acquisitions d\u2019aujourd\u2019hui marquent l\u2019architecture de s\u00e9curit\u00e9 de demain. Si elles ne tiennent pas compte des d\u00e9pendances cryptographiques et des capacit\u00e9s de migration, elles cr\u00e9ent de nouvelles dettes techniques, et les conversions ult\u00e9rieures seront plus co\u00fbteuses et plus risqu\u00e9es.

Plut\u00f4t que d\u2019engager le remplacement pr\u00e9cipit\u00e9 des syst\u00e8mes existants en visant une conversion totale et imm\u00e9diate, il faut adopter une d\u00e9marche pragmatique, ax\u00e9e sur les risques, fond\u00e9e sur des normes, neutre sur le plan technologique et pr\u00e9voyant des solutions transitoires lorsque c\u2019est n\u00e9cessaire. Les mots d\u2019ordre de cette d\u00e9marche sont la crypto-agilit\u00e9, la communication transparente des d\u00e9pendances cryptographiques et la capacit\u00e9 de migrer \u00e0 temps les donn\u00e9es sensibles vers des processus post-quantiques.

","DocumentationText":null,"MotionText":null,"FederalCouncilResponseText":"

Le Conseil f\u00e9d\u00e9ral propose d'accepter la motion.

","FederalCouncilProposal":44,"FederalCouncilProposalText":"Adoption","FederalCouncilProposalDate":"\/Date(1787702400000)\/","SubmittedBy":"Blunschy Dominik","BusinessStatus":203,"BusinessStatusText":"L\u2019avis relatif \u00e0 l\u2019intervention est disponible","BusinessStatusDate":"\/Date(1787734934000)\/","ResponsibleDepartment":6,"ResponsibleDepartmentName":"D\u00e9partement de la d\u00e9fense, de la protection de la population et des sports","ResponsibleDepartmentAbbreviation":"DDPS","IsLeadingDepartment":true,"Tags":"9|34|1236","Category":null,"Modified":"\/Date(1787907745883)\/","SubmissionDate":"\/Date(1781740800000)\/","SubmissionCouncil":1,"SubmissionCouncilName":"Conseil national","SubmissionCouncilAbbreviation":"CN","SubmissionSession":5214,"SubmissionLegislativePeriod":52,"FirstCouncil1":1,"FirstCouncil1Name":"Conseil national","FirstCouncil1Abbreviation":"CN","FirstCouncil2":null,"FirstCouncil2Name":null,"FirstCouncil2Abbreviation":null,"TagNames":"Politique de s\u00e9curit\u00e9|M\u00e9dias et communication|Droits de l'homme"}}