CoChat
Sign Up
PreprintCited by 19Quantum Computing Algorithms and ArchitectureQuantum Information and CryptographyCryptography and Residue Arithmetic

The DOI matches its DataCite record; 1 of the 20 references it cites were found in a registry or an index, and 19 are not checked yet.

How to compute a 256-bit elliptic curve private key with only 50 million Toffoli gates

Open access
Litinski, Daniel·2023·arXiv
DOI 10.48550/arxiv.2306.08585arXiv 2306.08585
Open this paper in CoChat — free accountOpen PDF

Abstract

We use Shor's algorithm for the computation of elliptic curve private keys as a case study for resource estimates in the silicon-photonics-inspired active-volume architecture. Here, a fault-tolerant surface-code quantum computer consists of modules with a logarithmic number of non-local inter-module connections, modifying the algorithmic cost function compared to 2D-local architectures. We find that the non-local connections reduce the cost per key by a factor of 300-700 depending on the operating regime. At 10% threshold, assuming a 10-$μ$s code cycle and non-local connections, one key can be generated every 10 minutes using 6000 modules with 1152 physical qubits each. By contrast, a device with strict 2D-local connectivity requires more qubits and produces one key every 38 hours. We also find simple architecture-independent algorithmic modifications that reduce the Toffoli count per key by up to a factor of 5. These modifications involve reusing the stored state for multiple keys and spreading the cost of the modular division operation over multiple parallel instances of the algorithm.

Overview

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

DataCite · 10.48550/arxiv.2306.08585

Cites

0 citation errors · 0 not checkable

Statistics

Verification

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Citations

Cites

The publisher hasn’t deposited this paper’s reference list.

Research works printed but not linked: 14

  1. J. Proos and C. Zalka, Shor's discrete logarithm quantum algorithm for elliptic curves, arXiv:quant- ph/0301141 (2003).
  2. Élie Gouzien, D. Ruiz, F.-M. L. Régent, J. Guil- laud, and N. Sangouard, Computing 256-bit Ellip- tic Curve Logarithm in 9 Hours with 126133 Cat Qubits, arXiv:2302.06639 (2023). · arXiv
  3. S. B. Bravyi and A. Y. Kitaev, Quantum codes on a lattice with boundary, arXiv:quant-ph/9811052 (1998). · arXiv
  4. A. G. Fowler and C. Gidney, Low over- head quantum computation using lattice surgery, arXiv:1808.06709 (2018). · arXiv
  5. H. Bombin, I. H. Kim, D. Litinski, N. Nicker- son, M. Pant, F. Pastawski, S. Roberts, and T. Rudolph, Interleaving: Modular architectures for fault-tolerant photonic quantum computing, arXiv:2103.08612 (2021). · arXiv
  6. D. Litinski and N. Nickerson, Active volume: An architecture for efficient fault-tolerant quan- tum computers with limited non-local connections, arXiv:2211.15465 (2022). · arXiv
  7. R. P. Brent and P. Zimmermann, Modern computer arithmetic, Vol. 18 (Cambridge University Press, 2010) pp. 67-68. · DOI
  8. C. Gidney, Windowed quantum arithmetic, arXiv:1905.07682 (2019). · arXiv
  9. N. Courtois, G. Song, and R. Castellucci, Speed optimizations in bitcoin key recovery attacks, Tatra Mountains Mathematical Publications-The Jour- nal of Slovak Academy of Sciences 67, 55 (2016). · DOI
  10. A. G. Fowler, Time-optimal quantum computation, arXiv:1210.4626 (2012). · arXiv
  11. R. Rines and I. Chuang, High performance quan- tum modular multipliers, arXiv:1801.01081 (2018). · arXiv
  12. C. Gidney, Quantum block lookahead adders and the wait for magic states, arXiv:2012.01624 (2020). · arXiv
  13. C. Gidney, Approximate encoded permutations and piecewise quantum adders, arXiv:1905.08488 (2019). · arXiv
  14. C. Gidney and A. G. Fowler, Flexible layout of surface code computations using AutoCCZ states, arXiv:1905.08916 (2018). · arXiv

Cited by

Sorted by citations

Related

See all

Metadata

Authors
Litinski, D.
Corresponding author
Litinski, Daniel
Venue
arXiv
Publisher
arXiv
Published
2023
ISSN
2331-8422 (ISSN-L)
DOI
10.48550/arxiv.2306.08585
arXiv
2306.08585
OpenAlex
W4380993703
Cited by
5
References
0
Citations by year
2026: 1 · 2025: 2 · 2024: 1 · 2023: 1
Type
posted content
Language
en
Open access
Licence
arxiv.org/licenses/nonexclusive-distrib/1.0/
Locations
  • arXiv (Cornell University) (submittedVersion)
  • arXiv (Cornell University)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Quantum Computing Algorithms and Architecture
  • Physical Sciences › Physics and Astronomy › Atomic and Molecular Physics, and Optics › Quantum Information and Cryptography
  • Physical Sciences › Computer Science › Information Systems › Cryptography and Residue Arithmetic
Keywords
Shor's algorithm, Toffoli gate, surface code, fault-tolerant quantum computing, silicon photonics, resource estimation, modular division, key generation time, qubit count

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review