Odaily Planet Daily reports: Cryptography engineer Filippo Valsorda wrote that quantum computing primarily impacts asymmetric algorithms (such as ECDSA and RSA), while having limited effect on symmetric encryption (such as AES and the SHA series); the Grover algorithm will not significantly weaken the security of 128-bit keys in practical scenarios.
Although Grover's algorithm can theoretically accelerate brute-force attacks, it is difficult to parallelize, resulting in extremely high practical attack costs. Even under ideal quantum computing conditions, the resources required to break AES-128 far exceed those needed to attack elliptic curve cryptography using Shor's algorithm.
In addition, standards organizations, including the National Institute of Standards and Technology (NIST), agree that AES-128 still meets post-quantum security requirements and does not need to be upgraded to a 256-bit key. The industry consensus is that prioritizing the replacement of asymmetric encryption schemes vulnerable to quantum attacks is a more urgent current task.