Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:1302.5844 · Physical Review A

Scaling laws for Shor's algorithm with a banded quantum Fourier transform

Yunseong Nam, R. Blümel

Published Mar 27, 2013• 23 citations
arXivHTMLPDF

Abstract

We investigate the performance of a streamlined version of Shor's algorithm in which the quantum Fourier transform is replaced by a banded version that, for each qubit, retains only coupling to its $b$ nearest neighbors. Defining the performance $P(n,b)$ of the $n$-qubit algorithm for bandwidth $b$ as the ratio of the success rates of Shor's algorithm equipped with the banded and the full-bandwidth ($b=n\ensuremath{-}1$) versions of the quantum Fourier transform, our numerical simulations show that $P(n,b)\ensuremath{\approx}\mathrm{exp}[\ensuremath{-}{\ensuremath{\varphi}}_{\mathrm{max}}^{2}(n,b)/100]$ for $n<{n}_{t}(b)$ (nonexponential regime) and $P(n,b)\ensuremath{\approx}{2}^{\ensuremath{-}{\ensuremath{\xi}}_{b}(n\ensuremath{-}8)}$ for $n>{n}_{t}(b)$ (exponential regime), where ${n}_{t}(b)$, the location of the transition, is approximately given by ${n}_{t}(b)\ensuremath{\approx}b+5.9+\sqrt{7.7(b+2)\ensuremath{-}47}$ for $b\ensuremath{\gtrsim}8$, ${\ensuremath{\varphi}}_{\mathrm{max}}(n,b)=2\ensuremath{\pi}[{2}^{\ensuremath{-}b\ensuremath{-}1}(n\ensuremath{-}b\ensuremath{-}2)+{2}^{\ensuremath{-}n}]$, and ${\ensuremath{\xi}}_{b}\ensuremath{\approx}1.1\ifmmode\times\else\texttimes\fi{}{2}^{\ensuremath{-}2b}$. Analytically we obtain $P(n,b)\ensuremath{\approx}\mathrm{exp}[\ensuremath{-}{\ensuremath{\varphi}}_{\mathrm{max}}^{2}(n,b)/64]$ for $n<{n}_{t}(b)$ and $P(n,b)\ensuremath{\approx}{2}^{\ensuremath{-}{\ensuremath{\xi}}_{b}^{(a)}n}$ for $n>{n}_{t}(b)$, where ${\ensuremath{\xi}}_{b}^{(a)}\ensuremath{\approx}\frac{{\ensuremath{\pi}}^{2}}{12\mathrm{ln}(2)}\ifmmode\times\else\texttimes\fi{}{2}^{\ensuremath{-}2b}\ensuremath{\approx}1.19\ifmmode\times\else\texttimes\fi{}{2}^{\ensuremath{-}2b}$. Thus, our analytical results predict the ${\ensuremath{\varphi}}_{\mathrm{max}}^{2}$ scaling ($n<{n}_{t}$) and the ${2}^{\ensuremath{-}2b}$ scaling ($n>{n}_{t}$) of the data perfectly. In addition, in the large-$n$ regime, the prefactor in ${\ensuremath{\xi}}_{b}^{(a)}$ is close to the results of our numerical simulations, and in the low-$n$ regime, the numerical scaling factor in our analytical result is within a factor 2 of its numerical value. As an example we show that $b=8$ is sufficient for factoring RSA-2048 with a 95$%$ success rate.

DOI
10.1103/physreva.87.032333

Related papers

Performance scaling of Shor's algorithm with a banded quantum Fourier transform

Yunseong Nam, R. Blümel

In excellent agreement with our numerical simulations of Shor's algorithm, equipped with a truncated quantum Fourier transform of bandwidth $b$, we find that its performance scales $\ensuremath{\sim}$${2}^{\ensuremath{-}{\ensuremath{\xi}}_{b}n}$, where $n$ is the number of qubits, ${\ensuremath{\xi}}_{b}=1.1\ifmmode\times\else\texttimes\fi{}{2}^{\ensuremath{-}2b}$, and the bandwidth $b$ is the number of quantum states coupled by the quantum Fourier transform. Nonexponential behavior is observed for small $n$ and explained analytically. The large-$n$ exponential scaling implies that $b=7$ is sufficient to operate a 1000-qubit quantum computer running Shor's algorithm on the $95%$ performance level and implies hardware savings of the order of half a million rotation gates.

Physical Review A•Oct 23, 2012•14 citations

Streamlining Shor's algorithm for potential hardware savings

Yunseong Nam, R. Blümel

We constructed a virtual quantum computer by running a complete, scaling, quantum-gate--by--quantum-gate implementation of Shor's algorithm on a 128-core classical cluster computer. In mode A [quantum period finding (PF) only, supplied with classical results for the modular exponentiation (ME) part of Shor's algorithm], factoring semiprimes up to $N=557\phantom{\rule{0.16em}{0ex}}993$ with up to $n=39$ qubits, we confirm earlier, smaller-$n$ results concerning the performance scaling of Shor's algorithm equipped with a truncated (banded) quantum Fourier transform. Running our virtual quantum computer in mode B (full quantum implementation of ME and PF), we find that a large number of gates may be discarded in a scalable way in both the ME and PF parts of Shor's algorithm in exchange for only a small reduction in performance. We explicitly state the associated scaling laws. Implying significant savings in quantum gates, we suggest that these results are of importance for future experimental and technical large-$n$ implementations of quantum computers.

Physical Review A•Jun 26, 2013•6 citations

The quantum Fourier transform on a linear nearest neighbor architecture

Yasuhiro Takahashi, Noboru Kunihiro, Kazuo Ohta

We show how to construct an efficient quantum circuit for computing a good approximation of the quantum Fourier transform on a linear nearest neighbor architecture. The constructed circuit uses no ancillary qubits and its depth and size are $O(n)$ and $O(n\log n)$, respectively, where $n$ is the length of the input. The circuit is useful for decreasing the size of Fowler et al.'s quantum circuit for Shor's factoring algorithm on a linear nearest neighbor architecture.

Quantum Information and Computation•May 1, 2007•37 citations

Implementation and Analysis of Scalability of Quantum Algorithms Based on Circuits and Subroutines

María Luisa Rodríguez Castillo

Quantum computing has given rise to significant challenges that make its wide availability difficult, especially when it comes to the accurate calculation of execution costs of Quantum Runtime Services, which in turn complicates the ability of a programmer to take well-informed decisions given an expectation of both cost and success rates. Quantum algorithms are intertwined in a complex web of dependencies, in which modern algorithms commonly incorporate other algorithms as subroutines. This paper studies whether the characterization of success metrics in scaling scenarios of specific quantum subroutines can be extrapolated to the quantum algorithms that integrate them as subroutines. It focuses on Shor’s algorithm, and the Quantum Fourier Transform algorithm as a subroutine, analyzing possible correlations in different scaling scenarios created by modifying the input parameters ’N’ and ’a’, running three jobs with different noise models for each one. The results showed a clear correlation that closely resembles a 2:1 ratio for the circuit where N = 15. For N = 15 circuits, success rates varied significantly, only reflecting ratios close to 2:1 when the period was equal to 2, an ideal, small and even number that reduced the required operations of the modular exponentiation stage. Larger periods such as r = 6 showed lesser success rates due to the necessity of performing more operations during the modular exponentiation stage and the noise accumulation it entails. Results achieved in high noise conditions had similar Shor and QFT success rates, evidencing how the dispersion of shots can alter the expected results. There is a meaningful connection between the success rates of an algorithm and its subroutine, which can be shadowed or decreased when error rates and qubit counts are increased.

•Jan 21, 2026•0 citations

Entanglement and its role in Shor's algorithm

Viv M. Kendon, William J. Munro

Entanglement has been termed a critical resource for quantum information processing and is thought to be the reason that certain quantum algorithms, such as Shor's factoring algorithm, can achieve exponentially better performance than their classical counterparts. The nature of this resource is still not fully understood: here we use numerical simulation to investigate how entanglement between register qubits varies as Shor's algorithm is run on a quantum computer. The shifting patterns in the entanglement are found to relate to the choice of basis for the quantum Fourier transform.

arXiv:quant-ph/0412140•Quantum Information and Computation•Nov 1, 2006•31 citations

Quantum Fourier Transform Has Small Entanglement

Jielun Chen, Edwin Miles Stoudenmire, Steven R. White

The quantum Fourier transform (QFT) is a key component of many important quantum algorithms, most famously being the essential ingredient in Shor's algorithm for factoring products of primes.Given its remarkable capability, one would think it can introduce large entanglement to qubit systems and would be difficult to simulate classically.While early results showed the QFT indeed has maximal operator entanglement, we show that this is entirely due to the bit reversal in the QFT.The core part of the QFT has Schmidt coefficients decaying exponentially quickly, and thus it can generate only a constant amount of entanglement regardless of the number of qubits.In addition, we show the entangling power of the QFT is the same as the time evolution of a Hamiltonian with exponentially decaying interactions, and thus a variant of the area law for dynamics can be used to understand the low entanglement intuitively.Using the low entanglement property of the QFT, we show that classical simulations of the QFT on a matrix product state with low bond dimension take time linear in the number of qubits, providing a potential speedup over the classical fast Fourier transform on many classes of functions.We demonstrate this speedup in test calculations on some simple functions.For data vectors of length 10 6 -10 8 , the speedup can be a few orders of magnitude.

arXiv:2210.08468•PRX Quantum•Oct 27, 2023•63 citations
We investigate the performance of a streamlined version of Shor's algorithm in which the quantum Fourier transform is replaced by a banded version that, for each qubit, retains only coupling to its bbb nearest neighbors. Defining the performance P(n,b)P(n,b)P(n,b) of the nnn-qubit algorithm for bandwidth bbb as the ratio of the success rates of Shor's algorithm equipped with the banded and the full-bandwidth (b=n\ensuremath−1b=n\ensuremath{-}1b=n\ensuremath−1) versions of the quantum Fourier transform, our numerical simulations show that P(n,b)\ensuremath≈exp[\ensuremath−\ensuremathφmax2(n,b)/100]P(n,b)\ensuremath{\approx}\mathrm{exp}[\ensuremath{-}{\ensuremath{\varphi}}_{\mathrm{max}}^{2}(n,b)/100]P(n,b)\ensuremath≈exp[\ensuremath−\ensuremathφmax2​(n,b)/100] for n<nt(b)n<{n}_{t}(b)n<nt​(b) (nonexponential regime) and P(n,b)\ensuremath≈2\ensuremath−\ensuremathξb(n\ensuremath−8)P(n,b)\ensuremath{\approx}{2}^{\ensuremath{-}{\ensuremath{\xi}}_{b}(n\ensuremath{-}8)}P(n,b)\ensuremath≈2\ensuremath−\ensuremathξb​(n\ensuremath−8) for n>nt(b)n>{n}_{t}(b)n>nt​(b) (exponential regime), where nt(b){n}_{t}(b)nt​(b), the location of the transition, is approximately given by nt(b)\ensuremath≈b+5.9+7.7(b+2)\ensuremath−47{n}_{t}(b)\ensuremath{\approx}b+5.9+\sqrt{7.7(b+2)\ensuremath{-}47}nt​(b)\ensuremath≈b+5.9+7.7(b+2)\ensuremath−47​ for b\ensuremath≳8b\ensuremath{\gtrsim}8b\ensuremath≳8, \ensuremathφmax(n,b)=2\ensuremathπ[2\ensuremath−b\ensuremath−1(n\ensuremath−b\ensuremath−2)+2\ensuremath−n]{\ensuremath{\varphi}}_{\mathrm{max}}(n,b)=2\ensuremath{\pi}[{2}^{\ensuremath{-}b\ensuremath{-}1}(n\ensuremath{-}b\ensuremath{-}2)+{2}^{\ensuremath{-}n}]\ensuremathφmax​(n,b)=2\ensuremathπ[2\ensuremath−b\ensuremath−1(n\ensuremath−b\ensuremath−2)+2\ensuremath−n], and \ensuremathξb\ensuremath≈1.1\ifmmode×\else\texttimes\fi2\ensuremath−2b{\ensuremath{\xi}}_{b}\ensuremath{\approx}1.1\ifmmode\times\else\texttimes\fi{}{2}^{\ensuremath{-}2b}\ensuremathξb​\ensuremath≈1.1\ifmmode×\else\texttimes\fi2\ensuremath−2b. Analytically we obtain P(n,b)\ensuremath≈exp[\ensuremath−\ensuremathφmax2(n,b)/64]P(n,b)\ensuremath{\approx}\mathrm{exp}[\ensuremath{-}{\ensuremath{\varphi}}_{\mathrm{max}}^{2}(n,b)/64]P(n,b)\ensuremath≈exp[\ensuremath−\ensuremathφmax2​(n,b)/64] for n<nt(b)n<{n}_{t}(b)n<nt​(b) and P(n,b)\ensuremath≈2\ensuremath−\ensuremathξb(a)nP(n,b)\ensuremath{\approx}{2}^{\ensuremath{-}{\ensuremath{\xi}}_{b}^{(a)}n}P(n,b)\ensuremath≈2\ensuremath−\ensuremathξb(a)​n for n>nt(b)n>{n}_{t}(b)n>nt​(b), where \ensuremathξb(a)\ensuremath≈\ensuremathπ212ln(2)\ifmmode×\else\texttimes\fi2\ensuremath−2b\ensuremath≈1.19\ifmmode×\else\texttimes\fi2\ensuremath−2b{\ensuremath{\xi}}_{b}^{(a)}\ensuremath{\approx}\frac{{\ensuremath{\pi}}^{2}}{12\mathrm{ln}(2)}\ifmmode\times\else\texttimes\fi{}{2}^{\ensuremath{-}2b}\ensuremath{\approx}1.19\ifmmode\times\else\texttimes\fi{}{2}^{\ensuremath{-}2b}\ensuremathξb(a)​\ensuremath≈12ln(2)\ensuremathπ2​\ifmmode×\else\texttimes\fi2\ensuremath−2b\ensuremath≈1.19\ifmmode×\else\texttimes\fi2\ensuremath−2b. Thus, our analytical results predict the \ensuremathφmax2{\ensuremath{\varphi}}_{\mathrm{max}}^{2}\ensuremathφmax2​ scaling (n<ntn<{n}_{t}n<nt​) and the 2\ensuremath−2b{2}^{\ensuremath{-}2b}2\ensuremath−2b scaling (n>ntn>{n}_{t}n>nt​) of the data perfectly. In addition, in the large-nnn regime, the prefactor in \ensuremathξb(a){\ensuremath{\xi}}_{b}^{(a)}\ensuremathξb(a)​ is close to the results of our numerical simulations, and in the low-nnn regime, the numerical scaling factor in our analytical result is within a factor 2 of its numerical value. As an example we show that b=8b=8b=8 is sufficient for factoring RSA-2048 with a 95% success rate.
In excellent agreement with our numerical simulations of Shor's algorithm, equipped with a truncated quantum Fourier transform of bandwidth bbb, we find that its performance scales $\ensuremath{\sim}$${2}^{\ensuremath{-}{\ensuremath{\xi}}_{b}n}$, where nnn is the number of qubits, ${\ensuremath{\xi}}_{b}=1.1\ifmmode\times\else\texttimes\fi{}{2}^{\ensuremath{-}2b}$, and the bandwidth bbb is the number of quantum states coupled by the quantum Fourier transform. Nonexponential behavior is observed for small nnn and explained analytically. The large-nnn exponential scaling implies that b=7b=7b=7 is sufficient to operate a 1000-qubit quantum computer running Shor's algorithm on the 9595%95 performance level and implies hardware savings of the order of half a million rotation gates.
We constructed a virtual quantum computer by running a complete, scaling, quantum-gate--by--quantum-gate implementation of Shor's algorithm on a 128-core classical cluster computer. In mode A [quantum period finding (PF) only, supplied with classical results for the modular exponentiation (ME) part of Shor's algorithm], factoring semiprimes up to N=557993N=557\phantom{\rule{0.16em}{0ex}}993N=557993 with up to n=39n=39n=39 qubits, we confirm earlier, smaller-nnn results concerning the performance scaling of Shor's algorithm equipped with a truncated (banded) quantum Fourier transform. Running our virtual quantum computer in mode B (full quantum implementation of ME and PF), we find that a large number of gates may be discarded in a scalable way in both the ME and PF parts of Shor's algorithm in exchange for only a small reduction in performance. We explicitly state the associated scaling laws. Implying significant savings in quantum gates, we suggest that these results are of importance for future experimental and technical large-nnn implementations of quantum computers.
We show how to construct an efficient quantum circuit for computing a good approximation of the quantum Fourier transform on a linear nearest neighbor architecture. The constructed circuit uses no ancillary qubits and its depth and size are O(n)O(n)O(n) and O(nlog⁡n)O(n\log n)O(nlogn), respectively, where nnn is the length of the input. The circuit is useful for decreasing the size of Fowler et al.'s quantum circuit for Shor's factoring algorithm on a linear nearest neighbor architecture.
Quantum computing has given rise to significant challenges that make its wide availability difficult, especially when it comes to the accurate calculation of execution costs of Quantum Runtime Services, which in turn complicates the ability of a programmer to take well-informed decisions given an expectation of both cost and success rates. Quantum algorithms are intertwined in a complex web of dependencies, in which modern algorithms commonly incorporate other algorithms as subroutines. This paper studies whether the characterization of success metrics in scaling scenarios of specific quantum subroutines can be extrapolated to the quantum algorithms that integrate them as subroutines. It focuses on Shor’s algorithm, and the Quantum Fourier Transform algorithm as a subroutine, analyzing possible correlations in different scaling scenarios created by modifying the input parameters ’N’ and ’a’, running three jobs with different noise models for each one. The results showed a clear correlation that closely resembles a 2:1 ratio for the circuit where N = 15. For N = 15 circuits, success rates varied significantly, only reflecting ratios close to 2:1 when the period was equal to 2, an ideal, small and even number that reduced the required operations of the modular exponentiation stage. Larger periods such as r = 6 showed lesser success rates due to the necessity of performing more operations during the modular exponentiation stage and the noise accumulation it entails. Results achieved in high noise conditions had similar Shor and QFT success rates, evidencing how the dispersion of shots can alter the expected results. There is a meaningful connection between the success rates of an algorithm and its subroutine, which can be shadowed or decreased when error rates and qubit counts are increased.
Entanglement has been termed a critical resource for quantum information processing and is thought to be the reason that certain quantum algorithms, such as Shor's factoring algorithm, can achieve exponentially better performance than their classical counterparts. The nature of this resource is still not fully understood: here we use numerical simulation to investigate how entanglement between register qubits varies as Shor's algorithm is run on a quantum computer. The shifting patterns in the entanglement are found to relate to the choice of basis for the quantum Fourier transform.
The quantum Fourier transform (QFT) is a key component of many important quantum algorithms, most famously being the essential ingredient in Shor's algorithm for factoring products of primes.Given its remarkable capability, one would think it can introduce large entanglement to qubit systems and would be difficult to simulate classically.While early results showed the QFT indeed has maximal operator entanglement, we show that this is entirely due to the bit reversal in the QFT.The core part of the QFT has Schmidt coefficients decaying exponentially quickly, and thus it can generate only a constant amount of entanglement regardless of the number of qubits.In addition, we show the entangling power of the QFT is the same as the time evolution of a Hamiltonian with exponentially decaying interactions, and thus a variant of the area law for dynamics can be used to understand the low entanglement intuitively.Using the low entanglement property of the QFT, we show that classical simulations of the QFT on a matrix product state with low bond dimension take time linear in the number of qubits, providing a potential speedup over the classical fast Fourier transform on many classes of functions.We demonstrate this speedup in test calculations on some simple functions.For data vectors of length 10 6 -10 8 , the speedup can be a few orders of magnitude.