Dustin Moody from NIST: “you don’t need more than 128 bits of symmetric keys for post-quantum security” #rwc2026

Say it louder, for the people in the back!

@filippo IIRC it was at RWC 2017 that NIST presented their PQC contest and some quantum computer people were telling me that all the fundamental challenges were solved and it was now just an engineering problem that within 10 years would produce something useful. 9 years later I’m glad to see we still have at least 9 more years.