首页|低T深度条件下ZUC-128的高效量子线路实现

低T深度条件下ZUC-128的高效量子线路实现

扫码查看
祖冲之密码算法(ZUC)是我国推出的一种流密码算法,本文主要研究如何以较低T深度实现ZUC-128算法的完整量子线路。S盒是ZUC-128算法非线性组件的重要组成部分,本文首先通过穷搜剪枝策略和塔域分解技术分别获得了S0和S1的经典线路实现,然后分两步设计S0和S1量子线路:第一步是减小经典线路的与门深度,第二步是实现量子线路的T深度等于经典线路的与门深度。本文新型的S0和S1的量子线路的T深度都为7。同时本文还研究了加法器和L函数的量子线路实现,以降低整体线路的T深度。最后本文探索出了ZUC-128算法整个流程的量子线路构造,当工作步骤中的L=32轮时,该量子线路需要46008个量子比特,682340个T门,2008535个CNOT门和42680个NOT门,T深度为11341,其量子比特数与T深度的乘积为5。22× 108。
An efficient quantum circuit implementation of ZUC-128 cipher with low T-depth
The Zu Chongzhi cryptographic algorithm(ZUC)is a stream cipher algorithm published in China.This paper focuses on the realization of the complete quantum circuit for the ZUC-128 algorithm with low T-depth.The S-box is a crucial component of the nonlinear aspect of the ZUC-128 algorithm.Initially,we derive the classical circuit implementations of S0 and S1 using an exhaustive pruning strategy and tower domain decomposition technology.Subsequently,we develop quantum circuits for S0 and S1 in two steps:first by reducing the AND-depth of the classical circuit,and then by ensuring that the T-depth of the quantum circuit equals the AND-depth of the classical circuit.Our new S0 and S1 quantum circuits both have a T-depth of 7.We are currently researching the quantum circuit implementation of the adder and L function in order to minimize the T-depth of the entire circuit.Finally,we propose the construction of quantum circuit to realize the whole process of ZUC-128 algorithm with low T-depth.When the number of rounds L=32 in the working step,this quantum circuit requires 46008 qubits,682340 T gates,2008535 CNOT gates and 42680 NOT gates,with the T-depth of 11341,and the number of qubits multiplied by T-depth is 5.22 x 108.

ZUC-128tower domain decompositionquantum circuit

邹剑、向思明、邹长忠、吴文玲

展开 >

福州大学计算机与大数据学院,福州 350108

福州大学网络系统信息安全重点实验室,福州 350108

中国科学院软件研究所可信计算与信息保障实验室,北京 100191

ZUC-128 塔域分解 量子线路

2024

中国科学(物理学 力学 天文学)
中国科学院

中国科学(物理学 力学 天文学)

CSTPCD北大核心
影响因子:0.644
ISSN:1674-7275
年,卷(期):2024.54(12)