6 ms·
AES-128 is effectively AES-64 when quantum computers exist which can run Grover's algorithm. That's not a huge exponent.
by brobinson 4y ago
AES-128 is effectively AES-64 when quantum computers exist which can run Grover's algorithm. That's not a huge exponent.
- adgjlsfhk1 4y agofor the time being it's fine (we're a long way away from having fast quantum computers where 2^64 is a significant problem), and AES-256 is already widely used
- upofadown 4y agoIt's been pointed out that Grover's algorithm parallelizes very badly. So not AES-64. It probably will turn out that AES-128 bit is perfectly fine as it has a tremendous amount of margin to start with