[Cryptography] quantum computers & crypto

[Brian Gladman]

On 04/11/2021 17:30, Arnold Reinhold via cryptography wrote:

<snip>

> While there are many candidates for ciphers with larger keys, the goal here is to stick as close to existing standards as possible. Does anyone know a reason why the AES key schedule cannot be safely replace by a standard XOF?

I would ask that question the other way around: "Can anyone show that 
the AES key schedule can be safely replaced by a standard XOF?"

    Brian Gladman