计算机科学 ›› 2024, Vol. 51 ›› Issue (6A): 230900051-6.doi: 10.11896/jsjkx.230900051
吕轶1, 罗庆斌1,2, 李强1, 郑圆梦3
LYU Yi1, LUO Qingbin1,2, LI Qiang1, ZHENG Yuanmeng3
摘要: S盒是Camellia密码算法重要的非线性组件。使用Toffoli门、CNOT门和NOT门构建Camellia密码算法S盒的量子电路。为了降低计算的复杂度,根据S盒的代数表达式,将有限域GF(28)中的乘法求逆运算同构到GF((24)2)的复合域中的运算,构造出Camellia密码算法S盒的量子电路。在优化方面,将仿射矩阵、同构矩阵以及一组CNOT门对应的矩阵先进行乘法操作,再进行综合,使用DORCIS工具优化GF(24)中乘法求逆的量子电路,运用W-Type算法优化矩阵运算的量子电路。最终得到的S盒的量子电路只需使用20 个量子比特,52 个 Toffoli 门、178 个 CNOT 门和 13 个 NOT 门,Toffoli深度为40,电路深度为 130。该量子电路的正确性通过IBM公司的Aer模拟器进行验证。相比于已有的结果,文中使用的量子资源有了进一步的减少。
中图分类号:
[1]BENNETT C H.Logical Reversibility of Computation[J].IBM Journal of Research and Development,1973,17(6):525-532. [2]SARAVANAN P,KALPANA P.Novel Reversible Design ofAdvanced Encryption Standard Cryptographic Algorithm for Wireless Sensor Networks[J].Wireless Personal Communications,2018,100(4):1427-1458. [3]FIPS 197.Advanced Encryption Standard(AES)[S].Gaithersburg,NIST,2001. [4]LIN D,XIANG Z,XU R,et al.Optimized Quantum Implementation of AES[J].arXiv:2109.12354,2021. [5]LI Z,GAO F,QIN S,et al.New record in the number of qubits for a quantum implementation of AES[J].Frontiers in Physics,2023,11:1171753. [6]JAQUES S.Implementing Grover Oracles for Quantum KeySearch on AES and LowMC[J].arXiv:1910.01700,2019. [7]LI Z,CAI B,SUN H,et al.Novel quantum circuit implementation of Advanced Encryption Standard with low costs[J].Science China Physics,Mechanics & Astronomy,2022,65(9),290311. [8]HUANG Z,SUN S.Synthesizing Quantum Circuits of AES with Lower T-depth and Less Qubits[M]//Advances in Cryptology-ASIACRYPT.Cham:Springer,2022:614-644. [9]FOWLER A G.Time-optimal quantum computation[J].arXiv:1210.4626,2013. [10]AOKI K,ICHIKAWA T,KANDA M,et al.Camel lia:a 128-bit block cipher suitable for multiple platforms-design and analysis[C]//Proceedings of the 7th Annual International Workshop.Waterloo:Springer,2000:39-56. [11]ZOU J,WEI Z,SUN S,et al.Some efficient quantum circuit implementations of Camellia[J].Quantum Information Processing,2022,21(4):131. [12]LI Z Q,GAO F,QIN S J,et al.Quantum circuit for implementing Camellia S-box with low costs[J].Science China Physics,Mechanics & Astronomy,2023,53(4):21-29. [13]XIANG Z,ZENG X,LIN D,et al.Optimizing Imple mentations of Linear Layers[J].IACR Trans.Symm.Cryptol.,2020(2):120-145. [14]ROMAN S.Field Extensions[M]//Graduate Texts in Mathematics:Field Theory.New York:Springer,1995:39-59. [15]LUO Q B,LI X Y,YAGN G W,et al.Quantum Cir cuit Implementation of S-box for SM4 Cryptographic Algorithm Based on Composite Field Arithmetic[J].Journal of University of Electronic Science and Technology of China,2022,50(6):820-826. [16]LI Z Q,CAI B B,SUN H W,et al.Novel quantum circuit implementation of Advanced Encryption Standard with low costs[J].Chinese Science:Physics,Mechanics and Astronomy,2022(9):65. [17]ALMAZROOIE M,ABDULLAH R,SAMSUDIN A,et al.Quantum Grover Attack on the Simplified-AES[C]//Proceedings of the 2018 7th International Conference on Software and Computer Applications.Kuantan Malaysia:ACM,2018:204-211. [18]SARAVANAN P,KALPANA P.Novel Reversible Design ofAdvanced Encryption Standard Cryptographic Algorithm for Wireless Sensor Networks[J].Wireless Personal Communications,2018,100(4):1427-1458. [19]WANG Z G,WEI S J,LONG G L.A quantum circuit design of AES requiring fewer quantumqubits and gate operations[J].Front Phys,2022,17:41501 [20]BOYAR J,PERALTA R.A New Combinational Logic Minimization Technique with Applications to Cryptology[C]//Experimental Algorithms[M].Berlin:Springer,2010:178-189. [21]DASU V A,BAKSI A,SARKAR S,et al.LIGHTER-R:Optimized Reversible Circuit Implementation For SBoxes[C]//2019 32nd IEEE International System-on-Chip Conference(SOCC).Singapore:IEEE,2019:260-265. [22]CHUN M,BAKSI A,CHATTOPADHYAY A.DORCIS:Depth Optimized Quantum Implementation of Substitution Boxes[EB/OL].(2023-02-25).https://eprint.iacr.org/2023/286. |
|