The current thinking is that 128 bit AES is not really threatened by Grover's algorithm: * https://words.filippo.io/dispatches/post-quantum-age/#128-bits-are-e

The current thinking is that 128 bit AES is not really threatened by Grover's algorithm: * https://words.filippo.io/dispatches/post-quantum-age/#128-bits-are-enough https://words.filippo.io/dispatches/post-quantum-age/#128-bi... >CISA expects cryptographically relevant quantum computers to become a risk within 5 years... That seems incredibly unlikely right now...