Abstract:The elliptic curve discrete logarithm problem (ECDLP) is a popular choice for cryptosystems due to its high level of security. However, with the advent of the extended Shor's algorithm, there is concern that ECDLP may soon be vulnerable. While the algorithm does offer hope in solving ECDLP, it is still uncertain whether it can pose a real threat in practice. From the perspective of the quantum circuits of the algorithm, this paper analyzes the feasibility of cracking ECDLP using an ion trap quantum computer with improved quantum circuits for the extended Shor's algorithm. We give precise quantum circuits for extended Shor's algorithm to calculate discrete logarithms on elliptic curves over prime fields, including modular subtraction, three different modular multiplication, and modular inverse. Additionally, we incorporate and improve upon windowed arithmetic in the circuits to reduce the CNOT-counts. Whereas previous studies mostly focused on minimizing the number of qubits or the depth of the circuit, we focus on minimizing the number of CNOT gates in the circuit, which greatly affects the running time of the algorithm on an ion trap quantum computer. Specifically, we begin by presenting implementations of basic arithmetic operations with the lowest known CNOT-counts, along with improved constructions for modular inverse, point addition, and windowed arithmetic. Next, we precisely estimate that, to execute the extended Shor's algorithm with the improved circuits to factor an n-bit integer, the CNOT-count required is 1237n(3)/ log n + 2n(2) + n. Finally, we analyze the running time and feasibility of the extended Shor's algorithm on an ion trap quantum computer.

Polylogarithmic-depth controlled-NOT gates without ancilla qubits

Low-depth Quantum Circuit Decomposition of Multi-controlled Gates

Decomposing (N+1)-Qubit Toffoli Gate with Shallow Circuit Depth and No Ancilla

Linear decomposition of approximate multi-controlled single qubit gates

Systematic construction of multi-controlled Pauli gate decompositions with optimal $T$-count

Shallower CNOT circuits on realistic quantum hardware

Analyzing And Implementing N-Qubit Controlled Gates

Quantum circuit for multi-qubit Toffoli gate with optimal resource

Distributed quantum logic algorithm

Efficient Implementation of Multi-Controlled Quantum Gates

Minimum Synthesis Cost of CNOT Circuits

Modifying $n$-qubit controlled-$ZX$ gate to be $n$-qubit Toffoli gate

Rise of conditionally clean ancillae for optimizing quantum circuits

Minimizing CNOT-count in Quantum Circuit of the Extended Shor’s Algorithm for ECDLP

Reduction of circuit depth by mapping qubit-based quantum gates to a qudit basis

Optimizing Gate Decomposition for High-Level Quantum Programming

Constant-depth circuits for Uniformly Controlled Gates and Boolean functions with application to quantum memory circuits

Synthesizing hybrid quantum circuits without ancilla qudits

Decomposing Quantum Generalized Toffoli with an Arbitrary Number of Ancilla

Cutting multi-control quantum gates with ZX calculus

Beyond Quantum Shannon: Circuit Construction for General n-Qubit Gates Based on Block ZXZ-Decomposition