Hacker News Reader

The whole symmetric key cryptography (e.g. AES) ia already quantum resistant. The problem only holds for public key encryption, but as the other commenter pointed out, there are already promising algorithms.

View on HN

That's nice, I didn't realise AES was quantum resistant.

However, an algorithm being promising doesn't mean it works. Do you know how well the development of these other techniques is progressing?

I'm not an expert in the field, but there is already a NIST competition going on to stansardize post-quantum public key ciphers. So I would say that we're at a good point in post-quantum cryptography development.

It's potentially quantum-resistant depending on how it's used. Grover's algorithm still reduces your effective key length by half in many situations.

Reply on news.ycombinator.com