AES-256 is the Bell Bottom Pants of Post-Quantum

AES-128 holds up against quantum computers. Filippo Valsorda took a walk through the math last week, but we already knew that NIST treats AES-128 as the Category 1 benchmark by definition, and BSI recommends AES-128. Outside CNSA 2.0, no compliance regime requires moving off AES-128, and CNSA 2.0’s AES-256 mandate is for uniform Top Secret … Continue reading AES-256 is the Bell Bottom Pants of Post-Quantum →