“256-bit AES keys should be used in order to achieve a 128-bit security level against quantum attacks.” – Alfred Menezes