Dustin Moody from NIST: “you don’t need more than 128 bits of symmetric keys for post-quantum security” #rwc2026

Say it louder, for the people in the back!

@filippo or you do need more but AES block length doesn’t make it very sensible.. who knows its time for a successor anyway if there are only 9 years left