Quantum computers weaken SHA-256 in a predictable, bounded way: about 128 bits of preimage security remain, and real hardware costs are far higher than the query counts suggest. Here is what Grover’s and BHT’s algorithms actually do.
Quantum computers weaken SHA-256 in a predictable, bounded way: about 128 bits of preimage security remain, and real hardware costs are far higher than the query counts suggest. Here is what Grover’s and BHT’s algorithms actually do.