There is no need to update symmetric key sizes as part of the post-quantum transition, due to the details of how Grover's algorithm scales. Most authorities agree.
  • Voxel@feddit.uk
    1·
    6 days ago

    To be honest, if we already have AES-256, we should use it instead of AES-128. There is very little benefit to using a weaker form of encryption.