3 ms·
IIRC the best quantum attack against SHA256 clocked in at about 2^85 cost. It's still not practical for most modern hash functions.
by CiPHPerCoder 7y ago
IIRC the best quantum attack against SHA256 clocked in at about 2^85 cost. It's still not practical for most modern hash functions.
- gdavisson 7y ago2^85 is for finding a collision; finding a preimage of a specific hash would take 2^128 steps of Grover's algorithm. That's thought to be beyond any possible future computer system.
- CiPHPerCoder 7y agoEither way, 85 bits of post-quantum security makes me feel safe.