Deciding on key lengths in the face of quantum computers