Abstract:The elliptic curve discrete logarithm problem (ECDLP) is a popular choice for cryptosystems due to its high level of security. However, with the advent of the extended Shor's algorithm, there is concern that ECDLP may soon be vulnerable. While the algorithm does offer hope in solving ECDLP, it is still uncertain whether it can pose a real threat in practice. From the perspective of the quantum circuits of the algorithm, this paper analyzes the feasibility of cracking ECDLP using an ion trap quantum computer with improved quantum circuits for the extended Shor's algorithm. We give precise quantum circuits for extended Shor's algorithm to calculate discrete logarithms on elliptic curves over prime fields, including modular subtraction, three different modular multiplication, and modular inverse. Additionally, we incorporate and improve upon windowed arithmetic in the circuits to reduce the CNOT-counts. Whereas previous studies mostly focused on minimizing the number of qubits or the depth of the circuit, we focus on minimizing the number of CNOT gates in the circuit, which greatly affects the running time of the algorithm on an ion trap quantum computer. Specifically, we begin by presenting implementations of basic arithmetic operations with the lowest known CNOT-counts, along with improved constructions for modular inverse, point addition, and windowed arithmetic. Next, we precisely estimate that, to execute the extended Shor's algorithm with the improved circuits to factor an n-bit integer, the CNOT-count required is 1237n(3)/ log n + 2n(2) + n. Finally, we analyze the running time and feasibility of the extended Shor's algorithm on an ion trap quantum computer.

New record in the number of qubits for a quantum implementation of AES

Optimized quantum implementation of AES

A quantum circuit design of AES

Optimized Quantum Circuit of AES With Interlacing-Uncompute Structure

Quantum reversible circuit of AES-128

Quantum-enhanced symmetric cryptanalysis for S-AES

Depth–measurement trade-off for quantum search on block ciphers

Implementation of an 8-bit bit-slice AES S-box with rapid single flux quantum circuits

Quantum Reversible Circuits for $\mathrm{gf}(2^{8})$ Multiplicative Inverse

Quantum Circuit Implementations of SM4 Block Cipher Optimizing the Number of Qubits

Quantum implementaion of SM4 block cipher with less qubits

Quantum reversible circuits for GF(2^8) multiplicative inverse

Quantum Circuit Implementation and Resource Analysis of LBlock and LiCi

Quantum reversible circuits for multiplicative inverse

Minimizing CNOT-count in Quantum Circuit of the Extended Shor’s Algorithm for ECDLP

Logic Realization of Galois Field for AES SBOX using Quantum Dot Cellular Automata

New quantum circuit implementations of SM4 and SM3

Application of the Composite Field in the Design of an Improved AES S-box Based on Inversion

Quantum circuit implementations of lightweight authenticated encryption ASCON

Dedicated Quantum Attacks on XOR-Type Function With Applications to Beyond-Birthday- Bound MACs

A High-Throughput Cost-Effective Asic Implementation Of The Aes Algorithm