Fast quantum modular exponentiation
Open accessAbstract
We present a detailed analysis of the impact on quantum modular exponentiation of architectural features and possible concurrent gate execution. Various arithmetic algorithms are evaluated for execution time, potential concurrency, and space trade-offs. We find that to exponentiate an $n\text{\ensuremath{-}}\text{bit}$ number, for storage space $100n$ (20 times the minimum $5n$), we can execute modular exponentiation 200--700 times faster than optimized versions of the basic algorithms, depending on architecture, for $n=128$. Addition on a neighbor-only architecture is limited to $O(n)$ time, whereas non-neighbor architectures can reach $O(\mathrm{log}\phantom{\rule{0.2em}{0ex}}n)$, demonstrating that physical characteristics of a computing device have an important impact on both real-world running time and asymptotic behavior. Our results will help guide experimental implementations of quantum algorithms and devices.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Windowed arithmetic reduces the number of modular multiplications by using small table lookups to fuse several multiplications together.
“The number of multiplications is reduced by using windowed arithmetic [35, 51, 83], which uses small table lookups to fuse several multiplications together.”
From How to factor 2048 bit RSA integers in 8 hours using 20 million noisy qubits (2021) · cites this paper as [83]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
<i>Quantum Computation and Quantum Information</i>
Nielsen, M. A., Chuang, I., & Grover, L. K. (2002) · American Journal of Physics · doi:10.1119/1.1463744 · Cited by 21,895 · see citing works
Algorithms for quantum computation: discrete logarithms and factoring
Shor, P. W. (2002) · Proceedings 35th Annual Symposium on Foundations of Computer Science · doi:10.1109/sfcs.1994.365700 · Cited by 8,713 · see citing works
Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer
Shor, P. W. (1997) · SIAM Journal on Computing · doi:10.1137/s0097539795293172 · Cited by 8,472 · see citing works
Quantum computation with quantum dots
Loss, D., & DiVincenzo, D. P. (1998) · Physical Review A · doi:10.1103/physreva.57.120 · Cited by 6,840 · see citing works
Elementary gates for quantum computation
Barenco, A., Bennett, C. H., Cleve, R., DiVincenzo, D. P., Margolus, N., Shor, P., Sleator, T., Smolin, J. A., & Weinfurter, H. (1995) · Physical Review A · doi:10.1103/physreva.52.3457 · Cited by 4,311 · see citing works
Efficient networks for quantum factoring
Beckman, D., Chari, A. N., Devabhaktuni, S., & Preskill, J. (1996) · Physical Review A · doi:10.1103/physreva.54.1034 · Cited by 268 · see citing works
Circuit for Shor's algorithm using 2n+3 qubits
Beauregard, S. (2003) · Quantum Information and Computation · doi:10.26421/qic3.2-8 · Cited by 206 · see citing works
Fast versions of Shor's quantum factoring algorithm
Zalka, C. (1998) · arXiv · doi:10.48550/arxiv.quant-ph/9806084 · Cited by 73 · see citing works
Flagged first, then by citations
Research works printed but not linked: 14
- [19]P. W. Shor, in Proc. 37th Symposium on Foundations of Computer Science (IEEE Computer Society Press, Los Alamitos, CA, 1996), pp. 56-65.
- [20]A. M. Steane and B. Ibinson, Fault-tolerant logical gate networks for CSS codes , http://arXiv.org/quant-ph/0311014 (2003).
- [22]A. V. Aho and K. M. Svore, Compiling quantum circuits using the palindrome transform , http://arXiv.org/quant-ph/0311008 (2003).
- [27]L. M. K. Vandersypen, Ph.D. thesis, Stanford University (2001).
- [28]A. Yao, in Proceedings of the 34th Annual Symposium on Foundations of Computer Science (Institute of Electrical and Electronic Engineers Computer Society Press, Los Alamitos, CA, 1993), pp. 352-361.
- [29]R. Van Meter, in Proc. Int. Symp. on Mesoscopic Superconductivity and Spintronics (MS+S2004) (2004).
- [30]M. D. Ercegovac and T. Lang, Digital Arithmetic (Morgan Kaufmann, San Francisco, CA, 2004).
- [31]S. A. Cuccaro, T. G. Draper, S. A. Kutin, and D. P. Moulton, A new quantum ripple-carry addition circuit , http://arXiv.org/quant-ph/0410184 (2004).
- [32]T. G. Draper, S. A. Kutin, E. M. Rains, and K. M. Svore, A logarithmic-depth quantum carry-lookahead adder , http://arXiv.org/quant-ph/0406142 (2004).
- [34]T. G. Draper, Addition on a quantum computer , http://arXiv.org/quant-ph/0008033 (2000), first draft dated Sept. 1998.
- [36]S. J. Devitt, A. G. Fowler, and L. C. Hollenberg, Simulations of Shor's algorithm with implications to scaling and quantum error correction , http://arXiv.org/quant-ph/0408081 (2004).
- [38]G. K. Brennen, C. M. Caves, P. S. Jessen, and I. H. Deutsch, Physical Review Letters 82 , 1060 (1999).
- [39]M. Oskin, F. T. Chong, I. L. Chuang, and J. Kubiatowicz, in Computer Architecture News, Proc. 30th Annual International Symposium on Computer Architecture (ACM, 2003).
- [41]Proc. ERATO Conference on Quantum Information Science (EQIS2003) (2003).
Cited by
Sorted by citations
How to factor 2048 bit RSA integers in 8 hours using 20 million noisy qubits
Gidney, C., & Ekerå, M. (2021) · Quantum · doi:10.22331/q-2021-04-15-433 · Cited by 830 · see citing works
Layered architecture for quantum computing
Jones, N. C., Van Meter, R., Fowler, A. G., McMahon, P. L., Kim, J., Ladd, T. D., & Yamamoto, Y. (2012) · Physical Review X · doi:10.1103/physrevx.2.031007 · Cited by 332 · see citing works
Faster quantum chemistry simulation on fault-tolerant quantum computers
Cody Jones, N., Whitfield, J. D., McMahon, P. L., Yung, M.-H., Meter, R. V., Aspuru-Guzik, A., & Yamamoto, Y. (2012) · New Journal of Physics · doi:10.1088/1367-2630/14/11/115023 · Cited by 145 · see citing works
Self-citationFactoring using $2n+2$ qubits with Toffoli based modular multiplication
Haner, T., Roetteler, M., & Svore, K. M. (2017) · Quantum Information and Computation · doi:10.26421/qic17.7-8-7 · Cited by 90 · see citing works
Arithmetic on a distributed-memory quantum multicomputer
Meter, R. V., Munro, W. J., Nemoto, K., & Itoh, K. M. (2008) · ACM Journal on Emerging Technologies in Computing Systems · doi:10.1145/1324177.1324179 · Cited by 65 · see citing works
Self-citationClark, C. R., Metodi, T. S., Gasster, S. D., & Brown, K. R. (2009) · Physical Review A · doi:10.1103/physreva.79.062314 · Cited by 51 · see citing works
Shor's algorithm on a nearest-neighbor machine
Kutin, S. A. (2006) · arXiv · doi:10.48550/arxiv.quant-ph/0609001 · Cited by 47 · see citing works
Fast quantum modular exponentiation architecture for Shor's factoring alogrithm
Pavlidis, A., & Gizopoulos, D. (2014) · Quantum Information and Computation · doi:10.26421/qic14.7-8-8 · Cited by 38 · see citing works
How to factor 2048 bit RSA integers with less than a million noisy qubits
Gidney, C. (2025) · arXiv · Cited by 7 · see citing works
“The second optimization that I apply is windowing [Kut06; VI05; Gid19b].”
- Authors
- Van Meter, R., & Itoh, K. M.
- Affiliations
- Keio University (JP)
- ORCID
- Itoh, Kohei M.
- Venue
- Physical Review A
- Publisher
- American Physical Society (APS)
- Published
- 2005-05-17
- Volume
- 71
- Issue
- 5
- ISSN
- 0556-2791 (ISSN-L)
- 1050-2947
- 1094-1622
- OpenAlex
- W2017278808
- Cited by
- 181
- References
- 8
- Citations by year
- 2026: 7 · 2025: 7 · 2024: 8 · 2023: 7 · 2022: 7 · 2021: 10 · 2020: 6 · 2019: 2 · 2018: 11 · 2017: 9 · 2016: 5 · 2015: 9 · 2014: 9 · 2013: 14 · 2012: 10
- FWCI
- 12.34
- Type
- journal article
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- Physical Review A (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Quantum Computing Algorithms and Architecture
- Physical Sciences › Computer Science › Information Systems › Cryptography and Residue Arithmetic
- Physical Sciences › Computer Science › Artificial Intelligence › Quantum Information and Cryptography
- Keywords
- quantum arithmetic, addition algorithm, arithmetic algorithms, quantum computing hardware, algorithm performance evaluation
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review