@filippo.abyssdomain.expert I agree to disagree: 128-bit keys MUST BE upgraded during a post-quantum migration.
kerkour.com/128-bit-keys...
kerkour.com
Are 128-bit symmetric keys really secure against quantum computers?
Quantum computers are a threat to traditional cryptography, more specifically to asymmetric cryptography (signatures and key exchanges) with Shor's algorithm enabling fast factoring of big numbers.