AES-128 remains secure against practical quantum attacks, and post-quantum migration does not require increasing symmetric key sizes. The real transition priority is asymmetric cryptography vulnerable to Shor’s algorithm, not 128-bit symmetric ciphers or hashes. [words.filippo.io]
Continue reading...
Continue reading...