Contrary to popular superstition, AES 128 is just fine in a post-quantum world

Cryptography engineer Filippo Valsorda argues that AES 128 remains secure against quantum computing threats, despite common misconceptions. The article explains that Grover’s algorithm reduces AES 128’s effective key strength by half, but brute-forcing it would still require billions of years using current computational resources like Bitcoin mining.