All other things equal, 256-bit elliptical curve cryptography is going to break before RSA2048 does with quantum computing advances. Do NOT switch to ECC if yo

All other things equal, 256-bit elliptical curve cryptography is going to break before RSA2048 does with quantum computing advances. Do NOT switch to ECC if your threat model includes a quantum computer arriving. Either use larger RSA keys or more appropriately a hybrid signature scheme combining one of NIST's PQC signatures and a traditional algorithm. https://csrc.nist.gov/Projects/post-quantum-cryptography/selected-algorithms-2022 https://csrc.nist.gov/Projects/post-quantum-cryptography/sel...