We're talking about 256-bit AES, not public key crypto. Unless additional flaws are found in AES, quantum computing only weakens 256-bit AES to requiring on av

We're talking about 256-bit AES, not public key crypto. Unless additional flaws are found in AES, quantum computing only weakens 256-bit AES to requiring on average 2^128 AES encryptions on the quantum machine.