4 ms·
AES isn't really threatened by quantum computing AFIK And most encryption is to use "something" to get an AES key and then us that to decrypt data. And that "
by dathinab 4y ago
AES isn't really threatened by quantum computing AFIK
And most encryption is to use "something" to get an AES key and then us that to decrypt data.
And that "something" (e.g. RSA/ECC based approaches) is what is threatened by quantum computing. But it's also not overly problematic if that "something" becomes slower to compute as it's done "only" once per-"a bunch of data".
AFIK the situation is similar for signing, as you don't sign the data itself normally but instead sign a hash of it and I think the hashing algorithms mostly used are not threatened by quantum computing either.
- janwas 4y agohm, which AES? AES-128 is getting a bit tight already for multi-target attacks. As to quantum, it looks like practical serial or parallel application of Grover's algorithm might still be decades away. But that is with current knowledge, and who knows what other breakthroughs will be made.
- branc116 4y ago> AES isn't really threatened by quantum computing NSA: "You are correct!"