We gratefully acknowledge support from
the Simons Foundation and member institutions.
Full-text links:

Download:

Current browse context:

cs.CR

Change to browse by:

References & Citations

DBLP - CS Bibliography

Bookmark

(what is this?)
CiteULike logo BibSonomy logo Mendeley logo del.icio.us logo Digg logo Reddit logo

Computer Science > Cryptography and Security

Title: Revisiting Shor's quantum algorithm for computing general discrete logarithms

Authors: Martin Ekerå
Abstract: We heuristically show that Shor's algorithm for computing general discrete logarithms achieves an expected success probability of approximately 60% to 82% in a single run when modified to enable efficient implementation with the semi-classical Fourier transform. By slightly increasing the number of group operations that are evaluated quantumly and performing a single limited search in the classical post-processing, or by performing two limited searches in the post-processing, we show how the algorithm can be further modified to achieve a success probability that heuristically exceeds 99% in a single run. We provide concrete heuristic estimates of the success probability of the modified algorithm, as a function of the group order $r$, the size of the search space in the classical post-processing, and the additional number of group operations evaluated quantumly. In the limit as $r \rightarrow \infty$, we heuristically show that the success probability tends to one. In analogy with our earlier works, we show how the modified quantum algorithm may be heuristically simulated classically when the logarithm $d$ and $r$ are both known. Furthermore, we heuristically show how slightly better tradeoffs may be achieved, compared to our earlier works, if $r$ is known when computing $d$. We generalize our heuristic to cover some of our earlier works, and compare it to the non-heuristic analyses in those works.
Comments: The pre-print has been updated with an extended heuristic, that better captures the probability distribution for small $\varsigma$, and that reduces to the original heuristic for $B_\eta = 0$. Associated updates have been made to the post-processing, to support searching over $\eta$ when $B_\eta > 0$. Various other associated updates, and improvements, additions and minor fixes, have been made
Subjects: Cryptography and Security (cs.CR); Quantum Physics (quant-ph)
Cite as: arXiv:1905.09084 [cs.CR]
  (or arXiv:1905.09084v3 [cs.CR] for this version)

Submission history

From: Martin Ekerå [view email]
[v1] Wed, 22 May 2019 11:47:38 GMT (15kb,D)
[v2] Mon, 12 Apr 2021 14:29:43 GMT (22kb,D)
[v3] Mon, 6 Mar 2023 13:23:21 GMT (33kb,D)

Link back to: arXiv, form interface, contact.