International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

New Quantum Cryptanalysis of Binary Elliptic Curves

Authors:
Kyungbae Jang
Vikas Vikas
Anubhab Baksi
Santanu Sarkar
Hwajeong Seo
Download:
DOI: 10.46586/tches.v2025.i2.781-804
URL: https://tches.iacr.org/index.php/TCHES/article/view/12065
Search ePrint
Search Google
Abstract: This paper improves upon the quantum circuits required for the Shor’s attack on binary elliptic curves. We present two types of quantum point addition, taking both qubit count and circuit depth into consideration.In summary, we propose an in-place point addition that improves upon the work of Banegas et al. from CHES’21, reducing the qubit count – depth product by more than 73% – 81% depending on the variant. Furthermore, we develop an out-of-place point addition by using additional qubits. This method achieves the lowest circuit depth and offers an improvement of over 92% in the qubit count – quantum depth product (for a single step).To the best of our knowledge, our work improves from all previous works (including the CHES’21 paper by Banegas et al., the IEEE Access’22 paper by Putranto et al., and the CT-RSA’23 paper by Taguchi and Takayasu) in terms of circuit depth and qubit count – depth product.Equipped with the implementations, we discuss the post-quantum security of the binary elliptic curve cryptography. Under the MAXDEPTH metric (proposed by the US government’s NIST), the quantum circuit with the highest depth in our work is 224, which is significantly lower than the MAXDEPTH limit of 240. For the gate count – full depth product, a metric for estimating quantum attack cost (proposed by NIST), the highest complexity in our work is 260 for the curve having degree 571 (which is comparable to AES-256 in terms of classical security), considerably below the post-quantum security level 1 threshold (of the order of 2156).
BibTeX
@article{tches-2025-35244,
  title={New Quantum Cryptanalysis of Binary Elliptic Curves},
  journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
  publisher={Ruhr-Universität Bochum},
  volume={2025},
  pages={781-804},
  url={https://tches.iacr.org/index.php/TCHES/article/view/12065},
  doi={10.46586/tches.v2025.i2.781-804},
  author={Kyungbae Jang and Vikas Vikas and Anubhab Baksi and Santanu Sarkar and Hwajeong Seo},
  year=2025
}