TLDR Tech / InfoSec
Contrary to popular superstition, AES 128 is just fine in a post-quantum world
AES-128 remains safe against quantum brute force, since Grover's algorithm cannot be parallelized like classical search, and realistic constraints push attack cost near 2^104 operations. Ultimately, NSA's AES-256 mandate targets uniform high security, and stresses that symmetric crypto can largely stay put while teams prioritize post-quantum replacements for vulnerable asymmetric schemes.
Read the full story