When we're talking about things like AES and SHA2, a common answer among experts to (1) is "probably no". (That's not a common answer to the same question abou

When we're talking about things like AES and SHA2, a common answer among experts to (1) is "probably no". (That's not a common answer to the same question about, say, ECDLP, even leaving quantum aside).