Contrary to popular superstition, AES 128 is just fine in a post-quantum world

The widespread adoption of AES 128, a 128-bit key size variant of the Advanced Encryption Standard, remains secure in the face of emerging quantum computing threats. Cryptography engineer Filippo Valsorda asserts that AES 128 is sufficiently robust to withstand potential quantum-based attacks, contradicting popular misconceptions about its vulnerability¹. As the most widely used form of AES, which was formally adopted by NIST in 2001, AES 128's security stems from its adherence to established cryptographic standards. The impending arrival of post-quantum computing does not necessitate immediate migration from AES 128, as its key size provides a sufficient security margin. This reassurance is crucial for practitioners, as it allows them to focus on more pressing post-quantum cryptography migration concerns, rather than rushing to replace existing AES 128 implementations. The ongoing development of post-quantum cryptography narrows the timeline for migration, making planning and urgency around PQC adoption increasingly important.