4 ms·
I would think most encryption at rest done using AES128/256, which is already quantum-resistant. It's mostly the key management which is at risk due to more hea
by spydum 4y ago
I would think most encryption at rest done using AES128/256, which is already quantum-resistant. It's mostly the key management which is at risk due to more heavily used RSA for asymmetric wrapping of keys.
- brobinson 4y agoAES-128 is effectively AES-64 when quantum computers exist which can run Grover's algorithm. That's not a huge exponent.
- adgjlsfhk1 4y agofor the time being it's fine (we're a long way away from having fast quantum computers where 2^64 is a significant problem), and AES-256 is already widely used
- upofadown 4y agoIt's been pointed out that Grover's algorithm parallelizes very badly. So not AES-64. It probably will turn out that AES-128 bit is perfectly fine as it has a tremendous amount of margin to start with