SHA-256 (SHA-2) is incomparable to SHA-1. The (first) successful SHA-1 collision attack executed by Google et al earlier this year implies absolutely nothing ab

SHA-256 (SHA-2) is incomparable to SHA-1. The (first) successful SHA-1 collision attack executed by Google et al earlier this year implies absolutely nothing about the computational hardness of SHA-2. There is no evidence whatsoever that quantum computers will break SHA-256; I'd be willing to personally stake essentially all of my assets on the bet that it won't be broken within our lifetimes. I also cannot think of a credible cryptographer off the top of my head who has voiced the opinion that quantum computers pose a threat to the SHA-2 family (or SHA-3, for that matter). At best I could see a complexity reduction, but nothing in polynomial time. Cryptographic primitives have such attacks published against them (and survive them) all the time.