Debunked: Quantum computers won't halve AES-128 security
Filippo Valsorda dismantles the myth that Grover's algorithm halves symmetric key security, showing AES-128 resists quantum attacks because sequential oracle calls and parallelization costs erase the speedup. AES-128, SHA-256 and SHA-3 stay safe; no symmetric key sizes must change in the post-quantum transition.