计算机科学 ›› 2024, Vol. 51 ›› Issue (6A): 230900051-6.doi: 10.11896/jsjkx.230900051

• 信息安全 • 上一篇    下一篇

Camellia密码算法S盒的量子电路优化

吕轶1, 罗庆斌1,2, 李强1, 郑圆梦3   

  1. 1 湖北民族大学智能科学与工程学院 湖北 恩施 445000
    2 电子科技大学信息与软件学院 成都 610054
    3 湖北民族大学数学与统计学院 湖北 恩施 445000
  • 发布日期:2024-06-06
  • 通讯作者: 罗庆斌(qingbinluo@126.com)
  • 作者简介:(lvzxiong002@gmail.com)
  • 基金资助:
    国家自然科学基金(62262020);湖北省自然科学基金(2020CFB326);湖北民族大学研究生创新项目(MYK2023074)

Quantum Circuit Optimization of Camellia Cryptographic Algorithm S-box

LYU Yi1, LUO Qingbin1,2, LI Qiang1, ZHENG Yuanmeng3   

  1. 1 College of Intelligent Science and Engineering,Hubei Minzu University,Enshi,Hubei 445000,China
    2 School of Information and Software,University of Electronic Science and Technology of China,Chengdu 610054,China
    3 School of Mathematics and Statistics,Hubei Minzu University,Enshi,Hubei 445000,China
  • Published:2024-06-06
  • About author:LYU Yi,born in 1997,postgraduate.His main research interests include quantum circuits and security analysis.
    LUO Qingbin,born in 1987,Ph.D.His main research interests include quantum computing and quantum cryptography.
  • Supported by:
    National Natural Science Foundation of China(62262020),Hubei Provincial Natural Science Foundation(2020CFB326) and Hubei Minzu University Graduate Innovation Project(MYK2023074).

摘要: S盒是Camellia密码算法重要的非线性组件。使用Toffoli门、CNOT门和NOT门构建Camellia密码算法S盒的量子电路。为了降低计算的复杂度,根据S盒的代数表达式,将有限域GF(28)中的乘法求逆运算同构到GF((24)2)的复合域中的运算,构造出Camellia密码算法S盒的量子电路。在优化方面,将仿射矩阵、同构矩阵以及一组CNOT门对应的矩阵先进行乘法操作,再进行综合,使用DORCIS工具优化GF(24)中乘法求逆的量子电路,运用W-Type算法优化矩阵运算的量子电路。最终得到的S盒的量子电路只需使用20 个量子比特,52 个 Toffoli 门、178 个 CNOT 门和 13 个 NOT 门,Toffoli深度为40,电路深度为 130。该量子电路的正确性通过IBM公司的Aer模拟器进行验证。相比于已有的结果,文中使用的量子资源有了进一步的减少。

关键词: 量子电路, Camellia, S盒, 复合域

Abstract: S-box is an important nonlinear component of Camellia cryptographic algorithm.In this paper,Toffoli gate,CNOT gate and NOT gate are used to construct the quantum circuit of Camellia cryptographic algorithm S box.In order to reduce the computational complexity,according to the algebraic expression of the S-box,the multiplication inversion operation in the finite domain GF(28)isisomorphic to the operation in the complex domain GF((24)2,and finally the quantum circuit diagram of Camellia cipher algorithm S box is synthesized.In optimization,the affine matrix,isomorphic matrix and a group of matrices corresponding to CNOT gates are first multiplied and then synthesized,and the quantum circuit of multiplication inversion in GF((24)2 is optimized using DORCIS tool,and the quantum circuit of matrix operation is optimized using W-Type algorithm.The resulting quantum circuit of the S-box uses only 20 qubits,52 Toffoli gates,178 CNOT gates,and 13 NOT gates,Toffoli-depth is 40,with a circuit depth of 130.The correctness of the quantum circuit is verified by IBM’s Aer simulator.Compared with the existing results,the quantum resources used in this paper are further reduced.

Key words: Quantum circuit, Camellia, S-box, Composite field

中图分类号: 

  • TP309
[1]BENNETT C H.Logical Reversibility of Computation[J].IBM Journal of Research and Development,1973,17(6):525-532.
[2]SARAVANAN P,KALPANA P.Novel Reversible Design ofAdvanced Encryption Standard Cryptographic Algorithm for Wireless Sensor Networks[J].Wireless Personal Communications,2018,100(4):1427-1458.
[3]FIPS 197.Advanced Encryption Standard(AES)[S].Gaithersburg,NIST,2001.
[4]LIN D,XIANG Z,XU R,et al.Optimized Quantum Implementation of AES[J].arXiv:2109.12354,2021.
[5]LI Z,GAO F,QIN S,et al.New record in the number of qubits for a quantum implementation of AES[J].Frontiers in Physics,2023,11:1171753.
[6]JAQUES S.Implementing Grover Oracles for Quantum KeySearch on AES and LowMC[J].arXiv:1910.01700,2019.
[7]LI Z,CAI B,SUN H,et al.Novel quantum circuit implementation of Advanced Encryption Standard with low costs[J].Science China Physics,Mechanics & Astronomy,2022,65(9),290311.
[8]HUANG Z,SUN S.Synthesizing Quantum Circuits of AES with Lower T-depth and Less Qubits[M]//Advances in Cryptology-ASIACRYPT.Cham:Springer,2022:614-644.
[9]FOWLER A G.Time-optimal quantum computation[J].arXiv:1210.4626,2013.
[10]AOKI K,ICHIKAWA T,KANDA M,et al.Camel lia:a 128-bit block cipher suitable for multiple platforms-design and analysis[C]//Proceedings of the 7th Annual International Workshop.Waterloo:Springer,2000:39-56.
[11]ZOU J,WEI Z,SUN S,et al.Some efficient quantum circuit implementations of Camellia[J].Quantum Information Processing,2022,21(4):131.
[12]LI Z Q,GAO F,QIN S J,et al.Quantum circuit for implementing Camellia S-box with low costs[J].Science China Physics,Mechanics & Astronomy,2023,53(4):21-29.
[13]XIANG Z,ZENG X,LIN D,et al.Optimizing Imple mentations of Linear Layers[J].IACR Trans.Symm.Cryptol.,2020(2):120-145.
[14]ROMAN S.Field Extensions[M]//Graduate Texts in Mathematics:Field Theory.New York:Springer,1995:39-59.
[15]LUO Q B,LI X Y,YAGN G W,et al.Quantum Cir cuit Implementation of S-box for SM4 Cryptographic Algorithm Based on Composite Field Arithmetic[J].Journal of University of Electronic Science and Technology of China,2022,50(6):820-826.
[16]LI Z Q,CAI B B,SUN H W,et al.Novel quantum circuit implementation of Advanced Encryption Standard with low costs[J].Chinese Science:Physics,Mechanics and Astronomy,2022(9):65.
[17]ALMAZROOIE M,ABDULLAH R,SAMSUDIN A,et al.Quantum Grover Attack on the Simplified-AES[C]//Proceedings of the 2018 7th International Conference on Software and Computer Applications.Kuantan Malaysia:ACM,2018:204-211.
[18]SARAVANAN P,KALPANA P.Novel Reversible Design ofAdvanced Encryption Standard Cryptographic Algorithm for Wireless Sensor Networks[J].Wireless Personal Communications,2018,100(4):1427-1458.
[19]WANG Z G,WEI S J,LONG G L.A quantum circuit design of AES requiring fewer quantumqubits and gate operations[J].Front Phys,2022,17:41501
[20]BOYAR J,PERALTA R.A New Combinational Logic Minimization Technique with Applications to Cryptology[C]//Experimental Algorithms[M].Berlin:Springer,2010:178-189.
[21]DASU V A,BAKSI A,SARKAR S,et al.LIGHTER-R:Optimized Reversible Circuit Implementation For SBoxes[C]//2019 32nd IEEE International System-on-Chip Conference(SOCC).Singapore:IEEE,2019:260-265.
[22]CHUN M,BAKSI A,CHATTOPADHYAY A.DORCIS:Depth Optimized Quantum Implementation of Substitution Boxes[EB/OL].(2023-02-25).https://eprint.iacr.org/2023/286.
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!