Deciphering a Million-Plus RSA Integer with Ultralow Local Field Coefficient h and Coupling Coefficient J of the Ising Model by D-Wave 2000Q  

作　　者：Chao Wang Qiaoyun Hu Haonan Yao Sumin Wang Zhi Pei 

机构地区：[1]Joint International Research Laboratory of Specialty Fiber Optics and Advanced Communication,Shanghai University,Shanghai 200444,China

出　　处：《Tsinghua Science and Technology》2024年第3期874-882,共9页清华大学学报（自然科学版（英文版）

基　　金：supported by the Special Zone Project of National Defense Innovation.

摘　　要：This work is the first to determine that a real quantum computer(including generalized and specialized)can decipher million-scale RSA relying solely on quantum algorithms,showing the real attack potential of D-Wave machines.The influence of different column widths on RSA factorization results is studied on the basis of a multiplication table,and the optimal column method is determined by traversal experiments.The traversal experiment of integer factorization within 10000 shows that the local field and coupling coefficients are 75%–93%lower than the research of Shanghai University in 2020 and more than 85%lower than that of Purdue University in 2018.Extremely low Ising model parameters are crucial to reducing the hardware requirements,prompting factoring 1245407 on the D-Wave 2000Q real machine.D-Wave advantage already has more than 5000 qubits and will be expanded to 7000 qubits during 2023–2024,with remarkable improvements in decoherence and topology.This machine is expected to promote the solution of large-scale combinatorial optimization problems.One of the contributions of this paper is the discussion of the long-term impact of D-Wave on the development of post-quantum cryptography standards.

关 键 词：quantum annealing RSA D-Wave 2000Q post-quantum cryptography 

分 类 号：O413[理学—理论物理] O224[理学—物理] TP38[自动化与计算机技术—计算机系统结构]