3 ms·
"Researchers from Canadian company Krypterra believe that we’d need 2,953 logical qubits to break AES-128 and 6,681 logical qubits to break AES-256." Grover's
by ahelwer 7y ago
"Researchers from Canadian company Krypterra believe that we’d need 2,953 logical qubits to break AES-128 and 6,681 logical qubits to break AES-256."
Grover's algorithm only gives a sqrt(n) speedup for breaking AES, so the number of bits is irrelevant; breaking 256-bit AES on a quantum computer would take as much time (or gates, rather) as breaking 128-bit AES on a classical computer.
- api 7y agoQC is really only a risk to RSA, DH, and elliptic curve, and maybe to small hashes and key sizes. I'd say if your symmetric stuff is bigger than 128 bit you only have to worry about asymmetric crypto.