Work out quantum resistance estimate instantly with clear inputs, formula shown and shareable results.
Quantum algorithms affect primitives unequally. Grover's search halves effective symmetric strength, so AES-256 retains 128 bits while AES-128 falls to 64. Shor's algorithm breaks RSA and elliptic curves entirely, reducing them to zero. The practical question is harvest-now-decrypt-later: if your data must stay secret for longer than the projected quantum horizon, traffic captured today is already at risk.
Quantum impact
symmetric: post-quantum bits = classical / 2 (Grover); RSA and ECC: post-quantum bits = 0 (Shor); exposure when data lifetime > quantum horizon
NIST's standardised ML-KEM (Kyber) for key establishment and ML-DSA (Dilithium) or SLH-DSA for signatures, ideally deployed as a hybrid alongside the existing classical algorithm.
It keeps classical security if the new scheme turns out to be flawed, while already protecting against future quantum decryption of today's captured traffic.