AES 128 remains secure in a post-quantum world

The widely used AES 128 encryption standard remains secure even as quantum computing advances. Cryptography expert Filippo Valsorda clarifies that the common belief about its vulnerability is a myth based on misconceptions.

Since its adoption by NIST in 2001, AES has been a trusted encryption method, with key sizes of 128, 192, and 256 bits. Among these, 128 bits became the preferred choice for its balance of security and efficiency. Over 30 years, no vulnerabilities have been found, and brute-force attacks would take billions of years, even with the combined power of bitcoin mining resources in 2026.

The concern arises from quantum algorithms like Grover’s, which could theoretically halve the effective security. However, Valsorda explains that such a reduction isn’t straightforward in practice, as the parallelization needed for a relevant quantum computer is not yet feasible. The cryptography community remains confident in AES 128’s resilience for the foreseeable future.

In summary, the idea that AES 128 will become obsolete due to quantum computers is a myth that doesn’t reflect current technological realities. The security community continues to trust this standard and develop new methods to protect data in an increasingly digital and quantum era.