Skip to main content

Table 8 The cost of quantum exhaustive search in \(\mathcal {QRKR}\)

From: Quantum key recovery attack on SIMON32/64

#iter

#NOT

# CNOTsum

# Hsum

#Cliff

#T

T-depth

Full depth

#qubit

  

#CNOT

#Toff-C

#H

#Toff-H

     

1

480

3392

10262

78

2932

17144

10262

921

3718

191

\(\lfloor \frac {\pi }{4}\sqrt {2^{55.2}}\rfloor \)

1.15·236

239

1.52·240

1.41·233

1.74·238

1.23·241

1.52·240

1.07·237

1.07·239

191