CryptoRecords.info
ECDLP

Elliptic-curve discrete logarithms

Compute discrete logarithms in elliptic-curve groups; distinguish ordinary cryptographic curves from anomalous or other exceptional families.

Binary fields · quantum resource bounds

Logical Toffoli count and logical qubits; scalar-multiplication variant specified

1 results · 1 papers
QuantumProvable circuit analysiselliptic curves over F_{2^n}Expression only
#PUBLICATION / AUTHORSDATETIME BOUNDSPACE BOUNDEVIDENCE
—Concrete quantum cryptanalysis of binary elliptic curvesGustavo Banegas · Daniel J. Bernstein · Iggy van Hoof · Tanja LangeTCHES 2021SourceBibTeX / detailslogical Toffoli gates logical qubits double-and-add19 Oct 202048n3 + 8nlog₂(3)+1 + 352n² log₂(n) + 512n² + O(nlog₂(3)) logical Toffoli gates7n + floor(log₂ n) + 9 logical qubitsPublishedSource checked
Comparison definition & assumptions
Regime
Logical Toffoli count and logical qubits; scalar-multiplication variant specified
Computation
Quantum
Rigor
Provable circuit analysis
Instances
elliptic curves over F_{2^n}
Cost scale
Expression only
Parameter
n
Description
Quantum ECDLP over binary fields. These formulas should not be ranked directly against prime-field circuits.
Comparison rules
Quantum ECDLP over binary fields. These formulas should not be ranked directly against prime-field circuits. Only compare entries with this cost scale, input domain and computational model. Polynomial and quasi-polynomial expressions without an extracted scalar are not ranked.
Tags
binary fields, quantum, logical resources