3 ms·

Does this mean that barring a quantum-hard alternative we could get effectively quantum-hard crypto by using crazy key sizes like RSA-131072 or ECC-4096?

• pbsd 11y ago
  Yes, though it would be quite impractical. See for example http://cr.yp.to/talks/2010.05.28/slides.pdf http://cr.yp.to/talks/2010.05.28/slides.pdf
  • Tomte 11y ago
    "Key almost fits on a hard drive" :-)