Skip to main content

Table 5 The cost of QAA iterator G=UsUg in Fig. 7

From: Quantum key recovery attack on SIMON32/64

Round #NOT # CNOTsum # Hsum #Cliff #T T-depth Full depth #qubit Refer
   #CNOT #Toff-C #H #Toff-H       
32 2688 17152 0 0 0 19840 24492 12288 27180 161 (Anand et al. 2020c)
32 896 9728 23702 128 6772 41226 23702 1230 5318 255 This paper
19 480 5568 14966 128 4276 25418 14966 1113 4434 255 This paper