[willis936]

AES 256 only requires millions of qubits to crack. What do we do once we think that's attainable behind close doors? It'd be better to be prepared.

https://www.fierceelectronics.com/electronics/aes-256-joins-...

[fsh]

This is a wildly optimistic estimate. Even if we had an error corrected quantum computer that could evaluate an AES key (complete science fiction for the forseeable future), running Grover's algorithm would take millenia assuming extremely fast gate times (1 ps).

In any case, doubling the key length would be infinitely simpler than using QKD.