Abstract:We provide two improvements to Regev's recent quantum factoring algorithm (<a class="link-https" data-arxiv-id="2308.06572" href="https://arxiv.org/abs/2308.06572">arXiv:2308.06572</a>), addressing its space efficiency and its noise-tolerance. Our first contribution is to improve the quantum space efficiency of Regev's algorithm while keeping the circuit size the same. Our main result constructs a quantum factoring circuit using $O(n \log n)$ qubits and $O(n^{3/2} \log n)$ gates. We achieve the best of Shor and Regev (upto a logarithmic factor in the space complexity): on the one hand, Regev's circuit requires $O(n^{3/2})$ qubits and $O(n^{3/2} \log n)$ gates, while Shor's circuit requires $O(n^2 \log n)$ gates but only $O(n)$ qubits. As with Regev, to factor an $n$-bit integer $N$, we run our circuit independently $\approx \sqrt{n}$ times and applies Regev's classical postprocessing procedure. Our optimization is achieved by implementing efficient and reversible exponentiation with Fibonacci numbers in the exponent, rather than the usual powers of 2, adapting work by Kaliski (<a class="link-https" data-arxiv-id="1711.02491" href="https://arxiv.org/abs/1711.02491">arXiv:1711.02491</a>) from the classical reversible setting to the quantum setting. This technique also allows us to perform quantum modular exponentiation that is efficient in both space and size without requiring significant precomputation, a result that may be useful for other quantum algorithms. A key ingredient of our exponentiation implementation is an efficient circuit for a function resembling in-place quantum-quantum modular multiplication. Our second contribution is to show that Regev's classical postprocessing procedure can be modified to tolerate a constant fraction of the quantum circuit runs being corrupted by errors. In contrast, Regev's analysis of his classical postprocessing procedure requires all $\approx \sqrt{n}$ runs to be successful. In a nutshell, we achieve this using lattice reduction techniques to detect and filter out corrupt samples.

Factoring with Hints

An Efficient Quantum Factoring Algorithm

Improved bounds for the implicit factorization problem.

Factoring Multi-power RSA Modulus N = p r q with Partial Known Bits.

An Algebraic-Geometry Approach to Prime Factorization

Factoring numbers with elliptic curves

Factoring integers using elliptic curves over q

Efficiently factoring polynomials modulo $p^4$

Factoring RSA Modulus with Known Bits from Both p and q: A Lattice Method.

On the improvement of fermat factorization

Some integer factorization algorithms using elliptic curves

Integer Factorization via Continued Fractions and Quadratic Forms

The State of Factoring on Quantum Computers

A Quantum Leap in Factoring

On speeding up factoring with quantum SAT solvers

Factoring with n+2 clean qubits and n-1 dirty qubits

Extending Regev's factoring algorithm to compute discrete logarithms

Improved Factoring Attacks On Multi-Prime Rsa With Small Prime Difference

Shor’s factoring algorithm and modern cryptography. An illustration of the capabilities inherent in quantum computers

An Method of Factoring Large Integers

Space-Efficient and Noise-Robust Quantum Factoring