4 ms·

AES is not unbreakable, just very hard to break. Schneier in 2009: http://www.schneier.com/blog/archives/2009/07/another_new_aes.html http://www.schneier.com/bl

• tptacek 13y ago
  I didn't say AES was "unbreakable"; that's a meaningless term. I said it wasn't threatened by quantum computing.
  • jjoonathan 13y ago
    Grover's algorithm halves the keysize. It's not a theoretical problem (just double the keysize) but plenty of sites today use 128-bit keys for their block ciphers. Even though quantum computers don't rival classical computers for speed yet and therefore saying that these keys are "effectively 64-bit" would be slightly disingenuous, there's no reason to expect that QCs won't make that a reality within our lifetimes.