Svmuu News: Cryptography engineer Filippo Valsorda wrote that the impact of quantum computing on current cryptographic systems is primarily focused on asymmetric algorithms (such as ECDSA and RSA), while its impact on symmetric encryption (such as the AES and SHA families) is limited. The Grover algorithm does not significantly compromise the security of 128-bit keys in practical scenarios. Although the Grover algorithm theoretically accelerates brute-force attacks, it is difficult to parallelize, resulting in extremely high practical attack costs. Even under ideal quantum computing conditions, the resources required to break AES-128 far exceed the cost of attacking elliptic curve cryptography using the Shor algorithm. Furthermore, standards bodies, including the National Institute of Standards and Technology (NIST), unanimously agree that AES-128 still meets post-quantum security requirements and does not need to be upgraded to a 256-bit key. Industry experts believe that focusing resources on replacing asymmetric encryption schemes vulnerable to quantum attacks is the more urgent task at present.