Quantum Computation and Shor's Factoring Algorithm

A Ekert,R Jozsa

DOI: https://doi.org/10.1103/revmodphys.68.733

IF: 50.485

1996-01-01

Reviews of Modern Physics

Abstract:The eld of quantum computation studies the power of computers that are based on quantum-mechanical principles. We give a brief introduction to the model of quantum computation and to its main success so far: Peter Shor's eecient quantum algorithm for factoring integers.

What problem does this paper attempt to address?

Quantum factoring, discrete logarithms and the hidden subgroup problem

Richard Jozsa

DOI: https://doi.org/10.1109/5992.909000

2000-12-17

Abstract:Amongst the most remarkable successes of quantum computation are Shor's efficient quantum algorithms for the computational tasks of integer factorisation and the evaluation of discrete logarithms. In this article we review the essential ingredients of these algorithms and draw out the unifying generalization of the so-called abelian hidden subgroup problem. This involves an unexpectedly harmonious alignment of the formalism of quantum physics with the elegant mathematical theory of group representations and fourier transforms on finite groups. Finally we consider the non-abelian hidden subgroup problem mentioning some open questions where future quantum algorithms may be expected to have a substantial impact.

Quantum Physics
Quantum Computations: Fundamentals And Algorithms

Steven Duplij,Illia Shapoval

DOI: https://doi.org/10.48550/arXiv.0712.1098

2007-12-07

Abstract:Basic concepts of quantum theory of information, principles of quantum calculations and the possibility of creation on this basis unique on calculation power and functioning principle device, named quantum computer, are briefly reviewed. The main blocks of quantum logic, schemes of implementation of quantum calculations, as well as some known today effective quantum algorithms, called to realize advantages of quantum calculations upon classical, are concerned. Among them special place is taken by Shor's algorithm of number factorization, Grover's algorithm of unsorted database search and, finally, the most promising in application methods of quantum phenomena simulation, particularly quantum chaos. The most perspective methods of experimental realization of quantum computer, namely nuclear-magnetic resonance and trapped ions realizations, are discussed. Phenomena of decoherence, its influence on quantum computer stability and methods of quantum error correction are described.

Quantum Physics
Shor’s factoring algorithm and modern cryptography. An illustration of the capabilities inherent in quantum computers

Edward Gerjuoy

DOI: https://doi.org/10.1119/1.1891170

IF: 0.835

2005-06-01

American Journal of Physics

Abstract:The security of messages encoded via the widely used RSA public key encryption system rests on the enormous computational effort required to find the prime factors of a large number N using classical (conventional) computers. In 1994 Peter Shor showed that for sufficiently large N, a quantum computer could perform the factoring with much less computational effort. This paper endeavors to explain, in a fashion comprehensible to the nonexpert, the RSA encryption protocol; the various quantum computer manipulations constituting the Shor algorithm; how the Shor algorithm performs the factoring; and the precise sense in which a quantum computer employing Shor’s algorithm can be said to accomplish the factoring of very large numbers with less computational effort than a classical computer. It is made apparent that factoring N generally requires many successive runs of the algorithm. Our analysis reveals that the probability of achieving a successful factorization on a single run is about twice as large as commonly quoted in the literature.

physics, multidisciplinary,education, scientific disciplines
A Quantum Leap in Factoring

Don Monroe

DOI: https://doi.org/10.1145/3644101

IF: 22.7

2024-05-23

Communications of the ACM

Abstract:In the mid-1990s, Peter Shor, at AT&T Bell Labs and then one of its heirs, AT&T Labs, devised the first algorithms that one day could exploit the intrinsic parallelism of quantum computing. In particular, Shor, now at the Massachusetts Institute of Technology (MIT), showed that quantum techniques could be exponentially faster than any classical computer at finding the factors of a very large number, a task whose difficulty is key to the security of widely used public-key cryptography techniques.

computer science, theory & methods, software engineering, hardware & architecture
Quantum algorithms for computing short discrete logarithms and factoring RSA integers

Martin Ekerå,Johan Håstad

DOI: https://doi.org/10.1007/978-3-319-59879-6_20

2017-02-01

Abstract:In this paper we generalize the quantum algorithm for computing short discrete logarithms previously introduced by Ekerå so as to allow for various tradeoffs between the number of times that the algorithm need be executed on the one hand, and the complexity of the algorithm and the requirements it imposes on the quantum computer on the other hand. Furthermore, we describe applications of algorithms for computing short discrete logarithms. In particular, we show how other important problems such as those of factoring RSA integers and of finding the order of groups under side information may be recast as short discrete logarithm problems. This immediately gives rise to an algorithm for factoring RSA integers that is less complex than Shor's general factoring algorithm in the sense that it imposes smaller requirements on the quantum computer. In both our algorithm and Shor's algorithm, the main hurdle is to compute a modular exponentiation in superposition. When factoring an n bit integer, the exponent is of length 2n bits in Shor's algorithm, compared to slightly more than n/2 bits in our algorithm.

Cryptography and Security,Quantum Physics
Introduction to quantum algorithms

Long Gui-Lu

2010-01-01

Physics

Abstract:Quantum information is an interdisciplinary science involving quantum mechanics,information theory,and computer science.It is of strategic importance and has far-reaching influence.Born in the late 1970s,it has developed very fast since the mid-1990s.Quantum information science includes quantum computing,quantum communication,and so on.The combination of different branches of science has led to many new research topics in science and technology,and many remarkable achievements have been made.This paper will introduce the basics of quantum information science,including some very important quantum algorithms such as Shor's algorithm and Grover's algorithm.The former factorizes an integer in polynomial steps,while the latter finds a marked item with a square-root increase in speed compared to classical algorithms.Other recent studies of quantum algorithms will also be reviewed.
Shor’s Algorithm for Quantum Factoring

Manisha J. Nene,Gaurav Upadhyay

DOI: https://doi.org/10.1007/978-981-10-1023-1_33

2016-01-01

Abstract:The strength of the famous RSA algorithm depends on the difficulty of factoring large integers in polynomial time. Shor’s quantum algorithm has the potential to break RSA in reasonable time. Although, development and commercial availability of high power (16-qubit and more) quantum computers is still some years away, efforts in the direction of simulating quantum algorithms on a classical system are welcome. This paper presents a systematic approach in the direction of factoring integers using the Shor’s quantum algorithm on a classical system, where the results of simulation are corroborated with theoretical results.
The State of Factoring on Quantum Computers

Dennis Willsch,Philipp Hanussek,Georg Hoever,Madita Willsch,Fengping Jin,Hans De Raedt,Kristel Michielsen

2024-10-18

Abstract:We report on the current state of factoring integers on both digital and analog quantum computers. For digital quantum computers, we study the effect of errors for which one can formally prove that Shor's factoring algorithm fails. For analog quantum computers, we experimentally test three factorisation methods and provide evidence for a scaling performance that is absolutely and asymptotically better than random guessing but still exponential. We conclude with an overview of future perspectives on factoring large integers on quantum computers.

Quantum Physics,Computational Physics
The Early Days of Quantum Computation

Peter W. Shor

DOI: https://doi.org/10.48550/arXiv.2208.09964

2022-10-27

Abstract:I recount some of my memories of the early development of quantum computation, including the discovery of the factoring algorithm, of error correcting codes, and of fault tolerance.

Quantum Physics
Implementation of Shor’s Algorithm in QISKIT by Quantum Computing using IBMQ

DOI: https://doi.org/10.30534/ijatcse/2021/971022021

2021-04-05

International Journal of Advanced Trends in Computer Science and Engineering

Abstract:Quantum machine learning is the combination of quantum computing and classical machine learning. It helps in solving the problems of one field to another field. Shor’s algorithm is used for factoring the integers in polynomial time. Since the bestknown classical algorithm requires super polynomial time to factor the product of two primes, the widely used cryptosystem, RSA, relies on factoring being impossible for large enough integers. In this paper we will focus on the quantum part of Shor’s algorithm, which actually solves the problem of period finding. In polynomial time factoring problem can be turned into a period finding problem so an efficient period finding algorithm can be used to factor integers efficiently.
Implementation of Shor's Algorithm and Its Demonstrated Quantum Efficiency

Chenxuan Wang

DOI: https://doi.org/10.47611/jsrhs.v13i1.6348

2024-02-29

Journal of Student Research

Abstract:The unique principles of quantum physics introduce an element of uncertainty into our previously deterministic world. Quantum computing, derived from quantum physics, enables the representation of a qubit in both |0> and |1> states, thus encoding more information and unleashing a realm of new possibilities. This paper conducts an analysis of the classical RSA encryption protocol and its vulnerability to the quantum algorithm—Shor's algorithm. Furthermore, this paper rigorously establishes the mathematical theories required for the analysis. Finally, the algorithm is thoroughly explored, and the potential efficiencies of quantum computing are discussed. As the study of quantum computing deepens, its application is poised to surpass that of traditional computers in various fields, leaving a profound impact.
Shor's discrete logarithm quantum algorithm for elliptic curves

John Proos,Christof Zalka

DOI: https://doi.org/10.48550/arXiv.quant-ph/0301141

2004-01-23

Abstract:We show in some detail how to implement Shor's efficient quantum algorithm for discrete logarithms for the particular case of elliptic curve groups. It turns out that for this problem a smaller quantum computer can solve problems further beyond current computing than for integer factorisation. A 160 bit elliptic curve cryptographic key could be broken on a quantum computer using around 1000 qubits while factoring the security-wise equivalent 1024 bit RSA modulus would require about 2000 qubits. In this paper we only consider elliptic curves over GF($p$) and not yet the equally important ones over GF($2^n$) or other finite fields. The main technical difficulty is to implement Euclid's gcd algorithm to compute multiplicative inverses modulo $p$. As the runtime of Euclid's algorithm depends on the input, one difficulty encountered is the ``quantum halting problem''.

Quantum Physics
Experimental realisation of Shor's quantum factoring algorithm using qubit recycling

Enrique Martin-Lopez,Anthony Laing,Thomas Lawson,Roberto Alvarez,Xiao-Qi Zhou,Jeremy L. O'Brien

DOI: https://doi.org/10.1038/nphoton.2012.259

2012-10-24

Abstract:Quantum computational algorithms exploit quantum mechanics to solve problems exponentially faster than the best classical algorithms. Shor's quantum algorithm for fast number factoring is a key example and the prime motivator in the international effort to realise a quantum computer. However, due to the substantial resource requirement, to date, there have been only four small-scale demonstrations. Here we address this resource demand and demonstrate a scalable version of Shor's algorithm in which the n qubit control register is replaced by a single qubit that is recycled n times: the total number of qubits is one third of that required in the standard protocol. Encoding the work register in higher-dimensional states, we implement a two-photon compiled algorithm to factor N=21. The algorithmic output is distinguishable from noise, in contrast to previous demonstrations. These results point to larger-scale implementations of Shor's algorithm by harnessing scalable resource reductions applicable to all physical architectures.

Quantum Physics
Shor's Factoring Algorithm and Modular Exponentiation Operators

Robert L Singleton Jr

DOI: https://doi.org/10.12743/quanta.v12i1.235

2023-09-18

Abstract:These are pedagogical notes on Shor's factoring algorithm, which is a quantum algorithm for factoring very large numbers (of order of hundreds to thousands of bits) in polynomial time. In contrast, all known classical algorithms for the factoring problem take an exponential time to factor large numbers. In these notes, we assume no prior knowledge of Shor's algorithm beyond a basic familiarity with the circuit model of quantum computing. The literature is thick with derivations and expositions of Shor's algorithm, but most of them seem to be lacking in essential details, and none of them provide a pedagogical presentation. We develop the theory of modular exponentiation (ME) operators in some detail, one of the fundamental components of Shor's algorithm, and the place where most of the quantum resources are deployed. We also discuss the post-quantum processing and the method of continued fractions, which is used to extract the exact period of the modular exponential function from the approximately measured phase angles of the ME operator. The manuscript then moves on to a series of examples. We first verify the formalism by factoring N=15, the smallest number accessible to Shor's algorithm. We then proceed to factor larger numbers, developing a systematic procedure that will find the ME operators for any semi-prime $N = p \times q$ (where $q$ and~$p$ are prime). Finally, we factor the numbers N=21, 33, 35, 143, 247 using the Qiskit simulator. It is observed that the ME operators are somewhat forgiving, and truncated approximate forms are able to extract factors just as well as the exact operators. This is because the method of continued fractions only requires an approximate phase value for its input, which suggests that implementing Shor's algorithm might not be as difficult as first suspected.

Quantum Physics
Integer Factorization by Quantum Measurements

Giuseppe Mussardo,Andrea Trombettoni

2023-09-20

Abstract:Quantum algorithms are at the heart of the ongoing efforts to use quantum mechanics to solve computational problems unsolvable on ordinary classical computers. Their common feature is the use of genuine quantum properties such as entanglement and superposition of states. Among the known quantum algorithms, a special role is played by the Shor algorithm, i.e. a polynomial-time quantum algorithm for integer factorization, with far reaching potential applications in several fields, such as cryptography. Here we present a different algorithm for integer factorization based on another genuine quantum property: quantum measurement. In this new scheme, the factorization of the integer $N$ is achieved in a number of steps equal to the number $k$ of its prime factors, -- e.g., if $N$ is the product of two primes, two quantum measurements are enough, regardless of the number of digits $n$ of the number $N$. Since $k$ is the lower bound to the number of operations one can do to factorize a general integer, one sees that a quantum mechanical setup can saturate such a bound.

Quantum Physics,Other Condensed Matter,High Energy Physics - Theory,Number Theory
Factoring 15 with a remote quantum computer: A complete guide for beginners

Jed Brody,Kristen Gram

DOI: https://doi.org/10.1088/1361-6404/ad32dc

2024-03-13

European Journal of Physics

Abstract:We present, for the non-specialist, an experimental implementation of Shor's factoring algorithm. We are unaware of any other single reference that explains, in a beginner-friendly way, complete circuits that implement Shor's algorithm. We perform the experiment with IBM quantum processors, which are remotely accessible online for free. We reproducibly factor 15 with one 7-qubit processor (ibm_perth), while four other quantum processors exhibit excessive error.

physics, multidisciplinary,education, scientific disciplines
Quantum computing with black-box quantum subroutines

Jayne Thompson,Mile Gu,Kavan Modi,Vlatko Vedral

2014-01-01

Abstract:[en] In classical computation a subroutine is treated as a black box and we do not need to know its exact physical implementation to use it. A complex problem can be decomposed into smaller problems using such modularity. We show that quantum mechanically applying an unknown quantum process as a subroutine is impossible, and this restricts computation models such as DQC1 from operating on unknown inputs. We present a method to avoid this situation for certain computational problems and apply to a modular version of Shor's factoring algorithm. We examine how quantum entanglement and discord fare in this implementation. In this way we are able to study the role of discord in Shor's factoring algorithm.
Unconditional correctness of recent quantum algorithms for factoring and computing discrete logarithms

Cédric Pilatte

2024-04-25

Abstract:In 1994, Shor introduced his famous quantum algorithm to factor integers and compute discrete logarithms in polynomial time. In 2023, Regev proposed a multi-dimensional version of Shor's algorithm that requires far fewer quantum gates. His algorithm relies on a number-theoretic conjecture on the elements in $(\mathbb{Z}/N\mathbb{Z})^{\times}$ that can be written as short products of very small prime numbers. We prove a version of this conjecture using tools from analytic number theory such as zero-density estimates. As a result, we obtain an unconditional proof of correctness of this improved quantum algorithm and of subsequent variants.

Number Theory,Computational Complexity,Quantum Physics
Implementation of 5-Qubit approach-based Shor's Algorithm in IBM Qiskit

G. R. Mounica,G. Manimaran,L. B. Jerome,P. Bhattacharjee

DOI: https://doi.org/10.1109/punecon52575.2021.9686492

2021-12-16

Abstract:RSA cryptography is a principle part in today's cyber-security frameworks, which intensely depends on the diffi-culty of factorizing large integers. Finding a factor of large prime number is not a small feature compared to the time complexity for computation on a classical computer is far beyond comprehension. Back in 1994, Peter Shor proposed a quantum algorithm to factorize integers much more efficiently than a classical computer. This can effectively break asymmetric cryptosystems such as RSA or Diffie-Hellman, depicted as the most famous quantum algorithm. It leverages the efficacy proclaimed by quantum bits and clearly shows how quantum computers can outperform classical ones in specific tasks. In this paper, we show how Shor's algorithm factorizes an integer into its two prime factors. Shor uses both classical and quantum computation to perform this task in polynomial time, using Euclidean algorithm and find the greatest common divisor (gcd) of two numbers in the classical part. Thereafter, the power of Quantum Fourier Transform (QFT) and Quantum Phase Estimation (QPE) is utilised for period-finding using quantum bits. We have implemented this algorithm on IBM's Quantum Lab and successfully factorized the number 15 into its prime factors as 5 and 3, by using 5 qubits. This paper provides an overview of the implementation of Shor's algorithm involving QPE, QFT, Modular Exponentiation and the corresponding individual implementations, the only prerequisite being, to know how a qubit works.
Large-Scale Simulation of Shor's Quantum Factoring Algorithm

Dennis Willsch,Madita Willsch,Fengping Jin,Hans De Raedt,Kristel Michielsen

DOI: https://doi.org/10.3390/math11194222

2023-10-10

Abstract:Shor's factoring algorithm is one of the most anticipated applications of quantum computing. However, the limited capabilities of today's quantum computers only permit a study of Shor's algorithm for very small numbers. Here we show how large GPU-based supercomputers can be used to assess the performance of Shor's algorithm for numbers that are out of reach for current and near-term quantum hardware. First, we study Shor's original factoring algorithm. While theoretical bounds suggest success probabilities of only 3-4 %, we find average success probabilities above 50 %, due to a high frequency of "lucky" cases, defined as successful factorizations despite unmet sufficient conditions. Second, we investigate a powerful post-processing procedure, by which the success probability can be brought arbitrarily close to one, with only a single run of Shor's quantum algorithm. Finally, we study the effectiveness of this post-processing procedure in the presence of typical errors in quantum processing hardware. We find that the quantum factoring algorithm exhibits a particular form of universality and resilience against the different types of errors. The largest semiprime that we have factored by executing Shor's algorithm on a GPU-based supercomputer, without exploiting prior knowledge of the solution, is 549755813701 = 712321 * 771781. We put forward the challenge of factoring, without oversimplification, a non-trivial semiprime larger than this number on any quantum computing device.

Quantum Physics,Computational Physics

Quantum Computation and Shor's Factoring Algorithm

Quantum factoring, discrete logarithms and the hidden subgroup problem

Quantum Computations: Fundamentals And Algorithms

Shor’s factoring algorithm and modern cryptography. An illustration of the capabilities inherent in quantum computers

A Quantum Leap in Factoring

Quantum algorithms for computing short discrete logarithms and factoring RSA integers

Introduction to quantum algorithms

Shor’s Algorithm for Quantum Factoring

The State of Factoring on Quantum Computers

The Early Days of Quantum Computation

Implementation of Shor’s Algorithm in QISKIT by Quantum Computing using IBMQ

Implementation of Shor's Algorithm and Its Demonstrated Quantum Efficiency

Shor's discrete logarithm quantum algorithm for elliptic curves

Experimental realisation of Shor's quantum factoring algorithm using qubit recycling

Shor's Factoring Algorithm and Modular Exponentiation Operators

Integer Factorization by Quantum Measurements

Factoring 15 with a remote quantum computer: A complete guide for beginners

Quantum computing with black-box quantum subroutines

Unconditional correctness of recent quantum algorithms for factoring and computing discrete logarithms

Implementation of 5-Qubit approach-based Shor's Algorithm in IBM Qiskit

Large-Scale Simulation of Shor's Quantum Factoring Algorithm