We present improved quantum circuits for elliptic curve scalar multiplication, the most costly component in Shor's algorithm to compute discrete logarithms in elliptic curve groups. We optimize low-level components such as reversible integer and modular arithmetic through windowing techniques and more adaptive placement of uncomputing steps, and improve over previous quantum circuits for modular inversion by reformulating the binary Euclidean algorithm. Overall, we obtain an affine Weierstrass point addition circuit that has lower depth and uses fewer $T$ gates than previous circuits. While previous work mostly focuses on minimizing the total number of qubits, we present various trade-offs between different cost metrics including the number of qubits, circuit depth and $T$-gate count. Finally, we provide a full implementation of point addition in the Q# quantum programming language that allows unit tests and automatic quantum resource estimation for all components.
We give precise quantum resource estimates for Shor's algorithm to compute discrete logarithms on elliptic curves over prime fields. The estimates are derived from a simulation of a Toffoli gate network for controlled elliptic curve point addition, implemented within the framework of the quantum computing software tool suite LIQ$Ui|\rangle$. We determine circuit implementations for reversible modular arithmetic, including modular addition, multiplication and inversion, as well as reversible elliptic curve point addition. We conclude that elliptic curve discrete logarithms on an elliptic curve …
Improving over an earlier construction by Kaye and Zalka, Maslov et al. describe an implementation of Shor's algorithm which can solve the discrete logarithm problem on binary elliptic curves in quadratic depth O(n^2). In this paper we show that discrete logarithms on such curves can be found with a quantum circuit of depth O(log^2 n). As technical tools we introduce quantum circuits for GF(2^n) multiplication in depth O(log n) and for GF(2^n) inversion in depth O(log^2 n).
Implementing the group arithmetic is a cost-critical task when designing quantum circuits for Shor's algorithm to solve the discrete logarithm problem. We introduce a tool for the automatic generation of addition circuits for ordinary binary elliptic curves, a prominent platform group for digital signatures. Our Python software generates circuit descriptions that, without increasing the number of qubits or T-depth, involve less than 39% of the number of T-gates in the best previous construction. The software also optimizes the (CNOT) depth for GF(2)-linear operations by means of suitable graph…
Elliptic curves over finite fields GF(2^n) play a prominent role in modern cryptography. Published quantum algorithms dealing with such curves build on a short Weierstrass form in combination with affine or projective coordinates. In this paper we show that changing the curve representation allows a substantial reduction in the number of T-gates needed to implement the curve arithmetic. As a tool, we present a quantum circuit for computing multiplicative inverses in GF(2^n) in depth O(n log n) using a polynomial basis representation, which may be of independent interest.
We show in some detail how to implement Shor's efficient quantum algorithm for discrete logarithms for the particular case of elliptic curve groups. It turns out that for this problem a smaller quantum computer can solve problems further beyond current computing than for integer factorisation. A 160 bit elliptic curve cryptographic key could be broken on a quantum computer using around 1000 qubits while factoring the security-wise equivalent 1024 bit RSA modulus would require about 2000 qubits. In this paper we only consider elliptic curves over GF($p$) and not yet the equally important ones o…
Near-Heisenberg-limited parallel amplitude estimation with logarithmic depth circuit
Mizuho Research & Technologies, Ltd.（瑞穗研究与技术株式会社）；Quantum Computing Center, Keio University（庆应义塾大学量子计算中心）；Graduate School of Science and Technology, Keio University（庆应义塾大学理工学研究科）；Department of Applied Physics and Physico-Informatics, Keio University（庆应义塾大学应用物理与物性信息学系）
We present a novel automated technique for parallelizing quantum circuits via forward and backward translation to measurement-based quantum computing patterns and analyze the trade off in terms of depth and space complexity. As a result we distinguish a class of polynomial depth circuits that can be parallelized to logarithmic depth while adding only polynomial many auxiliary qubits. In particular, we provide for the first time a full characterization of patterns with flow of arbitrary depth, based on the notion of influencing paths and a simple rewriting system on the angles of the measuremen…
We present an efficient addition circuit, borrowing techniques from the classical carry-lookahead arithmetic circuit. Our quantum carry-lookahead (QCLA) adder accepts two n-bit numbers and adds them in O(log n) depth using O(n) ancillary qubits. We present both in-place and out-of-place versions, as well as versions that add modulo 2^n and modulo 2^n - 1. Previously, the linear-depth ripple-carry addition circuit has been the method of choice. Our work reduces the cost of addition dramatically with only a slight increase in the number of required qubits. The QCLA adder can be used within curre…
Matchgates are an especially multiflorous class of two-qubit nearest neighbour quantum gates, defined by a set of algebraic constraints. They occur for example in the theory of perfect matchings of graphs, non-interacting fermions, and one-dimensional spin chains. We show that the computational power of circuits of matchgates is equivalent to that of space-bounded quantum computation with unitary gates, with space restricted to being logarithmic in the width of the matchgate circuit. In particular, for the conventional setting of polynomial-sized (logarithmic-space generated) families of match…
The generation of certifiable randomness is the most fundamental information-theoretic task that meaningfully separates quantum devices from their classical counterparts. We propose a protocol for exponential certified randomness expansion using a single quantum device. The protocol calls for the device to implement a simple quantum circuit of constant depth on a 2D lattice of qubits. The output of the circuit can be verified classically in linear time, and is guaranteed to contain a polynomial number of certified random bits assuming that the device used to generate the output operated using …
Disorder-enhanced compressibility of Floquet random quantum circuits
Forschungszentrum Jülich GmbH（于利希研究中心）；Institute of Quantum Control, Peter Grünberg Institut (PGI-8)（量子控制研究所，彼得·格林贝格研究所（PGI-8））；University of Regensburg（雷根斯堡大学）；Institut für Theorie der Statistischen Physik, RWTH Aachen（亚琛工业大学统计物理理论研究所）；Max Planck Institute for the Structure and Dynamics of Matter（马普物质结构与动力学研究所）；Universität Bonn（波恩大学）；Bethe Center for Theoretical Physics（贝特理论物理中心）；University of Cologne（科隆大学）
Distinguishing logarithmic depth quantum circuits on mixed states is shown to be complete for QIP, the class of problems having quantum interactive proof systems. Circuits in this model can represent arbitrary quantum processes, and thus this result has implications for the verification of implementations of quantum algorithms. The distinguishability problem is also complete for QIP on constant depth circuits containing the unbounded fan-out gate. These results are shown by reducing a QIP-complete problem to a logarithmic depth version of itself using a parallelization technique.
The complexity of the following numerical problem is studied in the quantum model of computation: Consider a general elliptic partial differential equation of order 2m in a smooth, bounded domain Q\subset \R^d with smooth coefficients and homogeneous boundary conditions. We seek to approximate the solution on a smooth submanifold M\subseteq Q of dimension 0\le d_1 \le d. With the right hand side belonging to C^r(Q), and the error being measured in the L_\infty(M) norm, we prove that the n-th minimal quantum error is (up to logarithmic factors) of order n^{-min((r+2m)/d_1,r/d+1)}. For compariso…
Random quantum circuit is a minimally structured model to study the entanglement dynamics of many-body quantum systems. In this paper, we considered a one-dimensional quantum circuit with noisy Haar-random unitary gates using density matrix operator and tensor contraction methods. It is shown that the entanglement evolution of the random quantum circuits is properly characterized by the logarithmic entanglement negativity. By performing exact numerical calculations, we found that, as the physical error rate is decreased below a critical value $p_c\approx 0.056$, the logarithmic entanglement ne…
The extension of many-body quantum dynamics to the non-unitary domain has led to a series of exciting developments, including new out-of-equilibrium entanglement phases and phase transitions. We show how a duality transformation between space and time on one hand, and unitarity and non-unitarity on the other, can be used to realize steady state phases of non-unitary dynamics that exhibit a rich variety of behavior in their entanglement scaling with subsystem size -- from logarithmic to extensive to \emph{fractal}. We show how these outcomes in non-unitary circuits (that are "spacetime-dual" to…
The discrete logarithm problem (DLP) is the basis for several cryptographic primitives. Since Shor's work, it has been known that the DLP can be solved by combining a polynomial-size quantum circuit and a polynomial-time classical post-processing algorithm. Evaluating and predicting the instance size that quantum devices can solve is an emerging research topic. In this paper, we propose a quantitative measure based on the success probability of the post-processing algorithm to determine whether an experiment on a quantum device (or a classical simulator) succeeded. We also propose a procedure …
High-performance techniques to simulate quantum programs on classical hardware rely on exponentially large vectors to represent quantum states. When simulating quantum algorithms, the quantum states that occur are often sparse due to special structure in the algorithm or even in the underlying problem. We thus introduce a new simulation method that exploits this sparsity to reduce memory usage and simulation runtime. Moreover, our prototype implementation includes optimizations such as gate (re)scheduling, which amortizes data structure accesses and reduces memory usage. To benchmark our imple…
The solving of linear systems provides a rich area to investigate the use of nearer-term, noisy, intermediate-scale quantum computers. In this work, we discuss hybrid quantum-classical algorithms for skewed linear systems for over-determined and under-determined cases. Our input model is such that the columns or rows of the matrix defining the linear system are given via quantum circuits of poly-logarithmic depth and the number of circuits is much smaller than their Hilbert space dimension. Our algorithms have poly-logarithmic dependence on the dimension and polynomial dependence in other natu…
This paper addresses the problem of finding the depth overhead that will be incurred when running quantum circuits on near-term quantum computers. Specifically, it is envisaged that near-term quantum computers will have low qubit connectivity: each qubit will only be able to interact with a subset of the other qubits, a reality typically represented by a qubit interaction graph in which a vertex represents a qubit and an edge represents a possible direct 2-qubit interaction (gate). Thus the depth overhead is unavoidably incurred by introducing swap gates into the quantum circuit to enable gene…
We exhibit some simple gadgets useful in designing shallow parallel circuits for quantum algorithms. We prove that any quantum circuit composed entirely of controlled-not gates or of diagonal gates can be parallelized to logarithmic depth, while circuits composed of both cannot. Finally, while we note the Quantum Fourier Transform can be parallelized to linear depth, we exhibit a simple quantum circuit related to it that we believe cannot be parallelized to less than linear depth, and therefore might be used to prove that QNC < QP.
We construct a classical algorithm that designs quantum circuits for algorithmic quantum simulation of arbitrary qudit channels on fault-tolerant quantum computers within a pre-specified error tolerance with respect to diamond-norm distance. The classical algorithm is constructed by decomposing a quantum channel into a convex combination of generalized extreme channels by optimization of a set of nonlinear coupled algebraic equations. The resultant circuit is a randomly chosen generalized extreme channel circuit whose run-time is logarithmic with respect to the error tolerance and quadratic wi…
Recent works by Bravyi, Gosset and König (Science 2018), Bene Watts et al. (STOC 2019), Coudron, Stark and Vidick (QIP 2019) and Le Gall (CCC 2019) have shown unconditional separations between the computational powers of shallow (i.e., small-depth) quantum and classical circuits: quantum circuits can solve in constant depth computational problems that require logarithmic depth to solve with classical circuits. Using quantum error correction, Bravyi, Gosset, König and Tomamichel (Nature Physics 2020) further proved that a similar separation still persists even if quantum circuits are subject to…
High quality factors, strong nonlinearities, and extensive design flexibility make superconducting circuits an ideal platform to investigate synchronization phenomena deep in the quantum regime. Recently~\cite{Loerch-2017}, it was predicted that energy quantization and conservation can block the synchronization of two identical, weakly coupled nonlinear self-oscillators. Here we propose a Josephson junction circuit realization of such a system along with a simple homodyne measurement scheme to observe this effect. We also show that at finite detuning, where phase synchronization takes place, t…
Toward Optimal Circuit Depth for Geometrically Local Hamiltonian Simulation
Center on Frontiers of Computing Studies, School of Computer Science, Peking University（北京大学计算机科学学院前沿计算研究中心）；School of Physics, Peking University（北京大学物理学院）；School of Artificial Intelligence, Beijing Normal University（北京师范大学人工智能学院）；State Key Laboratory for Novel Software Technology, Nanjing University（南京大学软件新技术国家重点实验室）；Hefei National Laboratory（合肥国家实验室）；Mathematical Institute, University of Oxford（牛津大学数学研究所）
We study a class of (1+1)D symmetric random quantum circuits with two competing types of measurements in addition to random unitary dynamics. The circuit exhibits a rich phase diagram involving robust symmetry-protected topological (SPT), trivial, and volume law entangled phases, where the transitions are hidden to expectation values of operators and can only be accessed through the entanglement entropy averaged over quantum trajectories. In the absence of unitary dynamics, we find a purely measurement-induced critical point with logarithmic scaling of the entanglement entropy, which we map ex…
In local quantum circuits with charge conservation, we initialize the system in random product states and study the dynamics of the Renyi entanglement entropy $R_α$. We rigorously prove that $R_α$ with Renyi index $α>1$ at time $t$ is $\le O(\sqrt{t\ln t})$ if the transport of charges is diffusive. Very recent numerical results of Rakovszky et al. show that this upper bound is saturated (up to the sub-logarithmic correction) in random local quantum circuits with charge conservation.
We study a (1+1)-dimensional quantum circuit consisting of Haar-random unitary gates and projective measurements that conserve a total $U(1)$ charge and thus have $U(1)$ symmetry. In addition to a measurement-induced entanglement transition between a volume-law and an area-law entangled phase, we find a phase transition between two phases characterized by bipartite charge fluctuation growing with the subsystem size or staying constant. At this charge-fluctuation transition, steady-state quantities obtained by evolving an initial state with a definitive total charge exhibit critical scaling beh…
