Skip to main content

Table 9 The cost comparison between \(\mathcal {QMKS}\) and \(\mathcal {QRKR}\)

From: Quantum key recovery attack on SIMON32/64

Algorithm

#NOT

# CNOTsum

# Hsum

#Cliff

#T

T-depth

Full depth

#qubit

  

#CNOT

#Toff-C

#H

#Toff-H

     

\(\mathcal {QMKS}\)

1.52·240

1.07·244

1.41·245

1.62·238

1.62·243

1.23·246

1.41·245

1.74·241

1.74·243

255

\(\mathcal {QRKR}\)

0

1.41·217

1.52·219

1.23·214

1.74·217

1.23·220

1.52·219

1.15·216

218

209

 

1.23·236

239

1.52·240

1.41·233

1.74·238

1.15·241

1.52·240

1.07·237

1.07·239

191