Evaluation of Grover’s algorithm toward quantum cryptanalysis on ChaCha

Bhagwan Bathe,Ravi Anand,Suman Dutta
DOI: https://doi.org/10.1007/s11128-021-03322-7
IF: 1.965
2021-11-19
Quantum Information Processing
Abstract:In this work, we have analyzed ChaCha against Grover’s search algorithm. We designed a reversible quantum circuit of ChaCha and then estimated the resources required to implement Grover. We showed that for MAXDEPTH = 240documentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$$ 2^{40} $$end{document}, the ChaCha20 256-bit key can be recovered using Grover’s search algorithm with a gate count of 1.233·2251documentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$$ 1.233 cdot 2^{251} $$end{document}, which is less than the NIST’s requirement of 2258documentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$$ 2^{258} $$end{document}. We also showed that implementing Grover’s algorithm greatly depends on the number of rounds in ChaCha. We deduced that ChaCha would require approximately 166 rounds so that implementing a non parallelized Grover would require a 2298documentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$$ 2^{298} $$end{document} gate count. We implemented a ChaCha-like toy cipher in IBMQ simulator and recovered key using Grover’s algorithm.
physics, multidisciplinary,quantum science & technology, mathematical
What problem does this paper attempt to address?