Maximizing the practical achievability of quantum annealing attacks on factorization-based cryptography

Olgierd Żołnierczyk

2024-10-07

Abstract:This work focuses on quantum methods for cryptanalysis of schemes based on the integer factorization problem and the discrete logarithm problem. We demonstrate how to practically solve the largest instances of the factorization problem by improving an approach that combines quantum and classical computations, assuming the use of the best publicly available special-class quantum computer: the quantum annealer. We achieve new computational experiment results by solving the largest instance of the factorization problem ever announced as solved using quantum annealing, with a size of 29 bits. The core idea of the improved approach is to leverage known sub-exponential classical method to break the problem down into many smaller computations and perform the most critical ones on a quantum computer. This approach does not reduce the complexity class, but it assesses the pragmatic capabilities of an attacker. It also marks a step forward in the development of hybrid methods, which in practice may surpass classical methods in terms of efficiency sooner than purely quantum computations will.

Cryptography and Security

What problem does this paper attempt to address?

### Problems the paper attempts to solve

This paper aims to explore how to maximize the attack on cryptographic schemes based on the integer factorization problem by combining quantum annealing and classical computing methods. Specifically, the paper focuses on the following points:

1. **Improve the practical feasibility of quantum annealing in cracking cryptographic schemes based on the integer factorization problem**:
- The authors show how to solve the largest - scale integer factorization instances by improving the method of combining quantum and classical computing.
- They used the current state - of - the - art special - category quantum computer - the quantum annealer - to solve the 29 - bit integer factorization problem, which is the largest instance solved using quantum annealing technology so far.

2. **Propose a hybrid method that uses known sub - exponential classical methods to decompose the problem into multiple smaller computing tasks**:
- The key idea is to use known sub - exponential classical methods to decompose the problem into many smaller computing tasks and execute the most critical computing part on a quantum computer.
- Although this method does not reduce the complexity class, it evaluates the actual capabilities of the attacker and marks a step in the development of hybrid methods that may surpass their efficiency earlier than pure classical methods in practice.

3. **Verify the effectiveness of quantum annealing in finding B - smooth numbers**:
- B - smooth numbers are numbers whose all prime factors are less than or equal to a given limit B. These numbers play a crucial role in the General Number Field Sieve (GNFS).
- Finding B - smooth numbers by quantum annealing can significantly improve the efficiency of GNFS, thus solving the integer factorization problem more quickly.

4. **Experimental results presentation**:
- The experimental results show that through this hybrid method, the 29 - bit integer factorization problem has been successfully solved, which exceeds the previous 23 - bit record solved by the fully quantum annealing method and the 26 - bit record solved by the most efficient hybrid method.

### Summary

The main contribution of the paper is to propose an improved hybrid quadratic sieve method that uses quantum annealing technology to screen smooth elements in the GNFS method. Although this method does not change the number of basic operations and thus still remains in the sub - exponential complexity class, it shows the potential of quantum annealing in solving practical problems and provides a new direction for future research.