Skip to main content

Table 5 The cost of QAA iterator G=UsUg in Fig. 7

From: Quantum key recovery attack on SIMON32/64

Round

#NOT

# CNOTsum

# Hsum

#Cliff

#T

T-depth

Full depth

#qubit

Refer

  

#CNOT

#Toff-C

#H

#Toff-H

      

32

2688

17152

0

0

0

19840

24492

12288

27180

161

(Anand et al. 2020c)

32

896

9728

23702

128

6772

41226

23702

1230

5318

255

This paper

19

480

5568

14966

128

4276

25418

14966

1113

4434

255

This paper