If your concern is an attacker that can do 128 bits of work, you've got other problems (like reality).