The generalized method of solving ECDLP using quantum annealing

Łukasz Dzierzkowski
2024-10-11
Abstract:This paper presents a generalization of a method allowing the transformation of the Elliptic Curve Discrete Logarithm Problem (ECDLP) over prime fields to the Quadratic Unconstrained Binary Optimization (QUBO) problem. The original method requires that a given elliptic curve model has complete arithmetic. The new one has no such restriction, which is a breakthrough. Since the mentioned obstacle is no longer a problem, the latest version of the algorithm may be used for any elliptic curve model. As a result, one may use quantum annealing to solve ECDLP on any given model of elliptic curves.
Cryptography and Security
What problem does this paper attempt to address?
This paper attempts to solve the generalization method of the Elliptic Curve Discrete Logarithm Problem (ECDLP) in quantum annealing computing. Specifically, the paper proposes a new method to transform ECDLP into a Quadratic Unconstrained Binary Optimization (QUBO) problem, so that the quantum annealing technique can be used to solve ECDLP on any elliptic curve model. ### Problem Background The Elliptic Curve Discrete Logarithm Problem (ECDLP) is an important basis for the security of Elliptic Curve Cryptography (ECC). Traditional methods such as Pohlig - Hellman, Baby step - giant step, Pollard's ρ and Pollard's λ algorithms generally have a fully exponential time complexity, so they cannot solve the ECDLP in modern cryptographic systems within a reasonable time. Quantum computing provides a potential solution. Shor's algorithm can solve ECDLP on a General - Purpose Quantum Computer (GPQC), but the required resources far exceed the current technological capabilities. Therefore, researchers began to explore other types of quantum computing devices, such as Quantum Annealing Machines (Quantum Annealing, QA), to solve ECDLP. ### Core Contributions of the Paper 1. **Breaking the Original Limitations**: Previous methods required that the elliptic curve model have complete arithmetic operations, while the new method no longer requires this condition and is applicable to any elliptic curve model. 2. **Fully Quantized Method**: The new method does not need to perform any calculations on a classical computer. It only needs to transform ECDLP into a specific form and use a quantum annealing machine to solve it. 3. **Generality and Flexibility**: This method can be applied to any elliptic curve model, even if these models do not have complete arithmetic operations. ### Method Overview - **ECDLP to QUBO Conversion**: By representing ECDLP in the form of binary variables and using Boolean algebra to transform it into a QUBO problem. - **Handling the Problem of Neutral Points**: Two methods are proposed to handle operations involving neutral points: - The first method is to add an extra point \( P \) during the first addition to ensure that subsequent operations will not encounter neutral points. - The second method is to detect whether a neutral point is encountered during the solution process and avoid the problem by adjusting the input parameters. ### Experimental Verification The paper has carried out experimental verification on the D - Wave quantum annealing machine and successfully solved ECDLP instances in a finite field. Although only small - scale problems have been solved so far, this method shows potential for larger - scale problems. ### Conclusions and Prospects The main advantages of this method include: - It does not require a numerical representation form of neutral points. - It does not need to use projective coordinates. - It can be applied to any elliptic curve model. - It has been verified by quantum and hybrid computing, proving its effectiveness. Future research directions include: - Trying different multiple representation methods to reduce resource requirements. - Testing this method on more elliptic curve models. - Exploring whether arithmetic operations using homomorphisms and other models in special cases can further optimize resource use. In conclusion, this paper provides a new and more general quantum annealing method for solving ECDLP, which is expected to promote the application of quantum computing in the field of cryptanalysis in the future.