Does Grover's algorithm's key-length halving apply equally to all symmetric ciphers, or do some resist it better?

The provided preprints don't directly address your question. You're asking whether Grover's quadratic speed-up against symmetric ciphers (which halves effective key length) applies uniformly across different cipher designs, or whether some structural properties make certain ciphers more resistant—a question about differential vulnerability to quantum search that sits between quantum cryptanalysis and cipher design.

The closest relevant work is [AG-2024.07-2243], which explores quantum algorithms for finding *truncated differentials* and *boomerang distinguishers* in symmetric ciphers. That paper shows quantum cryptanalysis can maintain polynomial complexity while accounting for S-boxes and key scheduling—suggesting the quantum threat may depend on cipher structure. However, it addresses *distinguishing attacks*, not the generic Grover key-search threat you're asking about, and doesn't compare robustness across cipher families.

To properly answer your question, you'd want papers comparing: (1) how cipher design choices (diffusion, non-linearity, key schedule depth) interact with Grover oracle construction costs, or (2) empirical quantum circuit costs for oracles across different ciphers (AES vs. Ascon vs. others). The archive appears to focus on Grover's algorithm theory and implementation rather than cipher-specific quantum security analysis.