[Analysis: 128-bit Symmetric Encryption Remains Secure, Quantum Computing Mainly Threatens Asymmetric Cryptography] Odaily Planet Daily News - Cryptography engineer Filippo Valsorda wrote that the impact of quantum computing on current encryption systems is primarily focused on asymmetric algorithms (such as ECDSA, RSA, etc.), while its effect on symmetric encryption (such as the AES and SHA series) is limited. The Grover algorithm does not significantly weaken the security of 128-bit keys in practical scenarios. Although the Grover algorithm theoretically accelerates brute-force attacks, it is difficult to parallelize, making actual attack costs extremely high. Even under ideal quantum computing conditions, the resources required to break AES-128 far exceed the cost of using the Shor algorithm to attack elliptic curve encryption. Furthermore, standard organizations, including the National Institute of Standards and Technology (NIST), agree that AES-128 still meets post-quantum security requirements and does not need to be upgraded to 256-bit keys. Industry opinions suggest that focusing resources on replacing asymmetric encryption schemes vulnerable to quantum attacks is currently a more urgent task.