Fig. 27From: Minimizing CNOT-count in quantum circuit of the extended Shor’s algorithm for ECDLPThe circuit for restoring the auxiliary bits in controlled point additionBack to article page