[ycmbntrthrwaway]

> quantum

irrelevant to symmetric crypto

[aaronmdjones]

Not irrelevant, it is my understanding that it can still cut the effort required considerably.

If you are using only a 128-bit key, a quantum computer can cut the brute-force effort required to 2^64, which is feasible today.