Abstract:We provide two improvements to Regev's recent quantum factoring algorithm (<a class="link-https" data-arxiv-id="2308.06572" href="https://arxiv.org/abs/2308.06572">arXiv:2308.06572</a>), addressing its space efficiency and its noise-tolerance. Our first contribution is to improve the quantum space efficiency of Regev's algorithm while keeping the circuit size the same. Our main result constructs a quantum factoring circuit using $O(n \log n)$ qubits and $O(n^{3/2} \log n)$ gates. We achieve the best of Shor and Regev (upto a logarithmic factor in the space complexity): on the one hand, Regev's circuit requires $O(n^{3/2})$ qubits and $O(n^{3/2} \log n)$ gates, while Shor's circuit requires $O(n^2 \log n)$ gates but only $O(n)$ qubits. As with Regev, to factor an $n$-bit integer $N$, we run our circuit independently $\approx \sqrt{n}$ times and applies Regev's classical postprocessing procedure. Our optimization is achieved by implementing efficient and reversible exponentiation with Fibonacci numbers in the exponent, rather than the usual powers of 2, adapting work by Kaliski (<a class="link-https" data-arxiv-id="1711.02491" href="https://arxiv.org/abs/1711.02491">arXiv:1711.02491</a>) from the classical reversible setting to the quantum setting. This technique also allows us to perform quantum modular exponentiation that is efficient in both space and size without requiring significant precomputation, a result that may be useful for other quantum algorithms. A key ingredient of our exponentiation implementation is an efficient circuit for a function resembling in-place quantum-quantum modular multiplication. Our second contribution is to show that Regev's classical postprocessing procedure can be modified to tolerate a constant fraction of the quantum circuit runs being corrupted by errors. In contrast, Regev's analysis of his classical postprocessing procedure requires all $\approx \sqrt{n}$ runs to be successful. In a nutshell, we achieve this using lattice reduction techniques to detect and filter out corrupt samples.

A Quantum Leap in Factoring

Shor’s factoring algorithm and modern cryptography. An illustration of the capabilities inherent in quantum computers

Quantum factoring, discrete logarithms and the hidden subgroup problem

Quantum Computation and Shor's Factoring Algorithm

Factoring 15 with a remote quantum computer: A complete guide for beginners

The State of Factoring on Quantum Computers

Shor’s Algorithm for Quantum Factoring

Large-Scale Simulation of Shor's Quantum Factoring Algorithm

An Efficient Quantum Factoring Algorithm

Unconditional correctness of recent quantum algorithms for factoring and computing discrete logarithms

The Early Days of Quantum Computation

Quantum and Classical Combinatorial Optimizations Applied to Lattice-Based Factorization

Shor's Factoring Algorithm and Modular Exponentiation Operators

Quantum algorithms for computing short discrete logarithms and factoring RSA integers

Experimental realisation of Shor's quantum factoring algorithm using qubit recycling

A comment on "Factoring integers with sublinear resources on a superconducting quantum processor"

On speeding up factoring with quantum SAT solvers

Implementation of Shor’s Algorithm in QISKIT by Quantum Computing using IBMQ

Shor's discrete logarithm quantum algorithm for elliptic curves

Implementation of 5-Qubit approach-based Shor's Algorithm in IBM Qiskit

Space-Efficient and Noise-Robust Quantum Factoring