Are 128-bit symmetric keys secure against quantum computers?
kerkour.com
2 threads
I like couching this as "technical debt" into the future. Feels like something which has to be reviewed, the question being "when" not "if"
Ideally when you declare something as technical debt, you should work to stop accumulating it. If possible, use AES-256 instead of AES-128 but you don't have to drop everything to switch to 256 today or even next 6 months.
As of the current time, our quantum computers are utilizing a hilariously low number of qBits, which severely limit the number of alternative universes that can be leveraged for calculations. As the number of qBits in use increases, the processing power expands appropriately.
As another commenter has said: it’s not if, it’s when.