Estimating the cost of generic quantum pre-image attacks on SHA-2 and SHA-3 · HackerPapers discussionshttps://hackerpaper.kaipfister.de/p/1603.09383/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:16:22 GMTEstimating the cost of generic quantum pre-image attacks on SHA-2 and SHA-3 — mentioned by charleslmungerhttps://news.ycombinator.com/item?id=16457607urn:hackerpapers:mention:1603.09383:16457607Sun, 25 Feb 2018 07:05:45 GMT<p>Grover&#x27;s algorithm means you need to double the length of your hashes, but that hardly puts sha-512 in danger. Even sha-256 is safer than a naive calculation would suggest: https://arxiv.org/pdf/1603.09383</p><p><a href="https://hackerpaper.kaipfister.de/p/1603.09383/">Paper and discussion history</a>. A mention is not an endorsement.</p>quant-ph