People have been saying that 256 bits is enough because even with Grover's algorithm the largest possible impact is to halve the key size. 128-bit brute force i

People have been saying that 256 bits is enough because even with Grover's algorithm the largest possible impact is to halve the key size. 128-bit brute force is still prohibitive in reasonable time frames. AES-256 and Salsa/ChaCha should be fine even post-QC. Symmetric crypto and hashes have never really been considered at risk except for very small sizes.