Vitalik Buterin: 顺便说一句，你们中的许多人都把这个弄错了。使用 Shor 算法的量子计算机完全打破了椭圆曲线。散列（如 SHA256）可以很好地在量子计算机中存活，尽管安全性有所降低，并且建议使用更长的散列长度。

Posted on 2022-09-04

原推：Many of you got this one very wrong btw. Quantum computers with Shor’s algorithm break elliptic curves completely. Hashes (like SHA256) survive quantum computers just fine, though security degrades somewhat and longer hash lengths become recommended.