2021
DOI: 10.1103/physreva.103.032433
|View full text |Cite
|
Sign up to set email alerts
|

Two quantum Ising algorithms for the shortest-vector problem

Abstract: Quantum computers are expected to break today's public key cryptography within a few decades. New cryptosystems are being designed and standardized for the postquantum era, and a significant proportion of these rely on the hardness of problems like the shortest-vector problem to a quantum adversary. In this paper we describe two variants of a quantum Ising algorithm to solve this problem. One variant is spatially efficient, requiring only O(N log 2 N ) qubits, where N is the lattice dimension, while the other … Show more

Help me understand this report
View preprint versions

Search citation statements

Order By: Relevance

Paper Sections

Select...
2
1
1

Citation Types

0
20
0

Year Published

2021
2021
2022
2022

Publication Types

Select...
6
3

Relationship

1
8

Authors

Journals

citations
Cited by 16 publications
(20 citation statements)
references
References 39 publications
0
20
0
Order By: Relevance
“…Quantum annealing is an approach to quantum computing where optimization and other problems are mapped such that their solutions correspond to the ground and low energy states of a Hamiltonian, and quantum fluctuations are used to solve the problem. Small proof-of-concept experiments have been performed based on a variety of real problems, with applications as diverse as cryptography [1], design of radar waveforms [2], protein folding [3], air traffic control [4], scheduling [5][6][7], and hydrology [8]. To the best of our knowledge, no scaling advantage has been observed on these devices for optimization, although recent work suggests one may be present for quantum simulation [9].…”
Section: Introductionmentioning
confidence: 99%
“…Quantum annealing is an approach to quantum computing where optimization and other problems are mapped such that their solutions correspond to the ground and low energy states of a Hamiltonian, and quantum fluctuations are used to solve the problem. Small proof-of-concept experiments have been performed based on a variety of real problems, with applications as diverse as cryptography [1], design of radar waveforms [2], protein folding [3], air traffic control [4], scheduling [5][6][7], and hydrology [8]. To the best of our knowledge, no scaling advantage has been observed on these devices for optimization, although recent work suggests one may be present for quantum simulation [9].…”
Section: Introductionmentioning
confidence: 99%
“…However, this does not tell the whole story, as currently available annealing hardware only has linear and quadratic interactions available. It is not necessarily true that the interactions between two binary variables can be written only in terms of these types of interactions; in fact, except for special cases such as objective functions involving multiplication of variables [30], [35], it is not going to be true. This can be rectified by engineering effective higher order interactions [27], [28], but each of these will require at least one auxiliary variable to engineer (although if this variable instantiated as a physical qubit, it may have less stringent requirements than the one used for computation [28]).…”
Section: B Binary Encodingmentioning
confidence: 99%
“…We restrict ourselves to the question of encoding general interactions, in other words encodings which can assign arbitrary energies based on the value of the two variables. This is an important restriction, since binary encoding is known to be efficient for specific interactions, for example in the case of the shortest vector problem [33].…”
Section: A Efficiency Of Domain-wall Techniquementioning
confidence: 99%