3 ms·
All current public-key encryption, and short-key private-key encryption yes. XChaCha20-Poly1305 will still be safe. AES-256 (in an appropriate authenticated mod
by SAI_Peregrinus 7y ago
All current public-key encryption, and short-key private-key encryption yes. XChaCha20-Poly1305 will still be safe. AES-256 (in an appropriate authenticated mode of operation and side-channel free implementation) will still be safe.
As for public-key encryption there are as-yet standardized algorithms that are likely secure. They're just slow. The NIST standardization should wrap up decades before any practical quantum computer is created, giving plenty of time to add some of these as options in protocols.