4 ms·
Does anyone know of a similar sort of estimates for AES? Do we know if Grover's algorithms can or cannot be applied to AES? Thanks.
by hangonhn 5y ago
Does anyone know of a similar sort of estimates for AES? Do we know if Grover's algorithms can or cannot be applied to AES?
Thanks.
- ahelwer 5y agoIt can but you only get a sqrt(n) speedup. Which is the same as halving the bits in the search space. Not trivial, but probably doesn't move it to tractable territory given appropriate key sizes.