Imagine searching an unordered list for one marked item. Classical search takes about N/2 checks on average; Grover's algorithm reduces this to roughly √N checks on a quantum computer. section 14.1.3
In cryptography, the algorithm can:
- Search for a symmetric key or value, reducing a 128-bit search from about 2^127 classical operations to 2^64 quantum operations. section 14.1.3
- Find collisions in hash functions or extract symmetric keys, making larger security parameters advisable. section 14.1.3
- Be countered by increasing symmetric security from 128 bits to 256 bits, such as choosing AES-256-GCM instead of AES-128-GCM or SHA-3-512 instead of SHA-3-256. section 14.1.3 section 14.5


