Fig. 35From: Minimizing CNOT-count in quantum circuit of the extended Shor’s algorithm for ECDLPThe equivalent form of n-controlled-NOTBack to article page