Abstract:We provide two improvements to Regev's recent quantum factoring algorithm (<a class="link-https" data-arxiv-id="2308.06572" href="https://arxiv.org/abs/2308.06572">arXiv:2308.06572</a>), addressing its space efficiency and its noise-tolerance. Our first contribution is to improve the quantum space efficiency of Regev's algorithm while keeping the circuit size the same. Our main result constructs a quantum factoring circuit using $O(n \log n)$ qubits and $O(n^{3/2} \log n)$ gates. We achieve the best of Shor and Regev (upto a logarithmic factor in the space complexity): on the one hand, Regev's circuit requires $O(n^{3/2})$ qubits and $O(n^{3/2} \log n)$ gates, while Shor's circuit requires $O(n^2 \log n)$ gates but only $O(n)$ qubits. As with Regev, to factor an $n$-bit integer $N$, we run our circuit independently $\approx \sqrt{n}$ times and applies Regev's classical postprocessing procedure. Our optimization is achieved by implementing efficient and reversible exponentiation with Fibonacci numbers in the exponent, rather than the usual powers of 2, adapting work by Kaliski (<a class="link-https" data-arxiv-id="1711.02491" href="https://arxiv.org/abs/1711.02491">arXiv:1711.02491</a>) from the classical reversible setting to the quantum setting. This technique also allows us to perform quantum modular exponentiation that is efficient in both space and size without requiring significant precomputation, a result that may be useful for other quantum algorithms. A key ingredient of our exponentiation implementation is an efficient circuit for a function resembling in-place quantum-quantum modular multiplication. Our second contribution is to show that Regev's classical postprocessing procedure can be modified to tolerate a constant fraction of the quantum circuit runs being corrupted by errors. In contrast, Regev's analysis of his classical postprocessing procedure requires all $\approx \sqrt{n}$ runs to be successful. In a nutshell, we achieve this using lattice reduction techniques to detect and filter out corrupt samples.

New Space-Efficient Quantum Algorithm for Binary Elliptic Curves using the Optimized Division Algorithm

Minimizing CNOT-count in Quantum Circuit of the Extended Shor’s Algorithm for ECDLP

Toffoli gate count optimized space-efficient quantum circuit for binary field multiplication

Efficient quantum circuits for binary elliptic curve arithmetic: reducing T-gate complexity

Boosting the Efficiency of Quantum Divider through Effective Design Space Exploration

Quantum Algorithm for Solving Hyperelliptic Curve Discrete Logarithm Problem

Quantum Circuit Designs of Point Doubling for Binary Elliptic Curves

Space-efficient binary optimization for variational quantum computing

Shor's discrete logarithm quantum algorithm for elliptic curves

Concrete quantum cryptanalysis of binary elliptic curves via addition chain

Resource Optimized Quantum Squaring Circuit

Quantum Circuit Designs of Integer Division Optimizing T-count and T-depth

Elliptic Curves in Continuous-Variable Quantum Systems

A Highly Efficient ECPM Quantum Circuit for Binary Elliptic Curve Cryptanalysis

Space-Efficient and Noise-Robust Quantum Factoring

Quantum circuit optimization of an integer divider

Quantum Algorithm for Optimization and Polynomial System Solving over Finite Field and Application to Cryptanalysis

Scaling Up the Quantum Divide and Conquer Algorithm for Combinatorial Optimization

Quantum algorithms for computing short discrete logarithms and factoring RSA integers

Intermediate Qutrit-based Improved Quantum Arithmetic Operations with Application on Financial Derivative Pricing

Two quantum Ising algorithms for the shortest-vector problem