Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Blok Şifrelemelerin Kuantum Uygulamaları

Çıldıroğlu, Hasan Ozgur

Published Sep 23, 2025• 0 citations
OpenAlex

Abstract

The emergence of quantum computing demands rigorous reassessment of classical cryptographic primitives, particularly lightweight block ciphers (LBCs). This work addresses this critical need by presenting the first comprehensive quantum implementation and security analysis of the Feistel-based LBCs SLIM and MIBS against quantum cryptanalysis. Leveraging the inherent reversibility of the ciphers, we develop novel ancilla-free quantum circuits optimizing qubit utilization and depth. For SLIM-80, our design achieves 30,404 quantum cost with 112 qubits and depth of 4,066. For MIBS-64 and MIBS-80, we implement circuits with 23,371 and 24,363 quantum costs requiring 128 and 144 qubits, respectively, and a uniform depth of 4,768. We then quantify vulnerability to Grover’s key-search under the NIST PQC security constraint MAXDEPTH. By constructing Grover oracles under inner parallelization with multiple plaintext-ciphertext pairs to suppress false positives, we demonstrate total attack costs of 2^111 for SLIM-80 and MIBS-80, and 2^94 for MIBS-64. These costs fall below NIST’s Level-1 security threshold 2^170, confirming both ciphers’ susceptibility to quantum threats despite their lightweight efficiency. Our methodology establishes a quantum implementation framework for Feistel ciphers, revealing critical trade-offs among qubit efficiency, depth, and quantum resilience.

Related papers

Quantum grover attack on MIBS

Hasan Özgür Çıldıroğlu, Harun Basmaci, Oğuz Yayla

Abstract The advent of quantum computing necessitates a rigorous reassessment of classical cryptographic primitives, particularly lightweight block ciphers (LBCs) deployed in resource-constrained environments. This work presents a comprehensive quantum implementation and security analysis of the Feistel-based LBC MIBS against quantum cryptanalysis. Using the inherent reversibility of its structure, we develop a novel ancilla-free quantum circuit that optimizes qubit count and depth. For MIBS-64 and MIBS-80, our implementation achieves quantum costs of 23,371 and 24,363, requiring 128 and 144 qubits, respectively, with a depth of 4,768. We subsequently quantify the cipher’s vulnerability to Grover’s key-search algorithm under the NIST PQC security constraint M A X D E P T H $\mathtt{M}\mathtt{A}\mathtt{X}\mathtt{D}\mathtt{E}\mathtt{P}\mathtt{T}\mathtt{H}$ . By constructing Grover oracles using inner parallelization with multiple plaintext-ciphertext pairs to suppress false positives, we demonstrate total quantum attack costs of approximately 2 94 for MIBS-64 and 2 111 for MIBS-80. These values fall below NIST’s Level-1 security threshold (2 170 ), confirming the susceptibility of both MIBS variants to quantum key-recovery attacks despite their classical lightweight efficiency.

Open Physics•Jan 1, 2026•0 citations

Quantum implementation of SLIM and its Grover cryptanalysis

H O Cildiroglu, Oğuz Yayla

Abstract We present a novel quantum implementation of SLIM, a lightweight 32/80-bit Feistel cipher. By inverting its Key addition-Substitution-Permutation (KSP) layers without ancillary qubits, we construct the full quantum circuit using 112 qubits with quantum cost 30,404 and depth 4,066. To assess quantum resilience, we implement Grover’s algorithm with three plaintext-ciphertext pairs (r = 3; 337 qubits), yielding an attack cost of 2 111 under NIST’s MAXDEPTH constraints—below the Level-1 threshold 2 170 . While SLIM falls short of NIST’s security threshold for near-term quantum attacks, among other lightweight BCs, its efficient architecture retains practical advantages for constrained applications.

Physica Scripta•Oct 1, 2025•3 citations

Quantum Circuit Realization and Grover Cryptanalysis of the Hybrid ARX-SPN Cipher GFSPX

Ibrahim Ulgen, Hasan Ozgur Cildiroglu, Oğuz Yayla

The security of classical symmetric-key primitives is fundamentally challenged by the emergence of quantum computing, necessitating a rigorous evaluation of their post-quantum resilience. This paper presents a comprehensive quantum circuit realization and Grover cryptanalysis of GFSPX, a lightweight block cipher featuring a 64-bit data block and a 128-bit secret key. GFSPX utilizes a unique hybrid architecture that integrates a 4-branch generalized Feistel structure with both Addition-Rotation-XOR (ARX) and Substitution-Permutation Network (SPN) components. Our quantum implementation optimizes resource distribution by exploiting the inherent reversibility of the Feistel network and employing a compact ripple-carry adder for the ARX layers. The proposed architecture achieves a qubit-optimized footprint of 209 qubits with a baseline quantum cost of 32,498 and a circuit depth of 7,617. To evaluate the cipher's resistance against quantum adversaries, we construct a parallelized Grover oracle using three plaintext-ciphertext pairs to eliminate spurious matches. Our analysis reveals that the total quantum cost of a key-recovery attack on GFSPX is $1.12 \times 2^{159}$ quantum gates. Although this cost falls below the NIST Level 1 security threshold of $2^{170}$, the hybrid ARX-SPN design demonstrates a higher quantum attack resistance among other lightweight designs. These findings provide critical insights into the balance between classical efficiency and quantum resilience in next-generation cryptographic designs for resource-constrained environments.

quant-pharXiv:2605.27443•Physica Scripta•May 26, 2026•0 citations

Qubit Optimized Quantum Implementation of SLIM

Hasan Özgür Çıldıroğlu, Oğuz Yayla

The advent of quantum computing has profound implications for current technologies, offering advancements in optimization while posing significant threats to cryptographic algorithms. Public-key cryptosystems relying on prime factorization or discrete logarithms are particularly vulnerable, whereas block ciphers (BCs) remain secure through increased key lengths. In this study, we introduce a novel quantum implementation of SLIM, a lightweight block cipher optimized for 32-bit plaintext and an 80-bit key, based on a Feistel structure. This implementation distinguishes itself from other BC quantum implementations in its class (64-128-bit) by utilizing a minimal number of qubits while maintaining robust cryptographic strength and efficiency. By employing an innovative design that minimizes qubit usage, this work highlights SLIM's potential as a resource-efficient and secure candidate for quantum-resistant encryption protocols.

arXiv:2412.10835•Dec 14, 2024•1 citation

Compact Quantum Circuit Design of PUFFIN and PRINT Lightweight Ciphers for Quantum Key Recovery Attack

P. Saravanan, J. Jenitha, S. Sanjana +1 more

Quantum computing plays a vital role in the next generation computing platforms as researchers have achieved quantum supremacy by proving that quantum computers can outperform classical computers. These high performance computers will pose a serious threat to the security of the conventional cryptographic algorithms. The secret key of the conventional cryptographic algorithms when implemented by quantum circuits can easily be recovered with the help of Grover key search algorithm. The Grover’s algorithm requires low cost quantum implementation of cryptographic algorithms in order to mount the quantum key recovery attack successfully. Hence the low cost quantum implementation of conventional cryptographic algorithms to mount quantum key recovery attack using Grover search algorithm is an active area of research. This work proposes a novel quantum circuit implementation of two lightweight block ciphers namely PUFFIN and PRINT and for the first time in literature In-place method is used to optimize the quantum resources in these two ciphers which helps to build compact quantum circuits without extra ancilla inputs. The performance metrics considered in this work to quantify the quantum resources of the proposed circuits are number of quantum gates, quantum cost, latency and number of qubits. In addition, the quantum resources are also estimated to mount the quantum key recovery attacks on the proposed quantum circuit implementations of PUFFIN and PRINT using Grover-based key search algorithm.

IEEE Access•Jan 1, 2023•9 citations

Efficient Implementation of PRESENT and GIFT on Quantum Computers

Kyungbae Jang, Gyeongju Song, Hyunjun Kim +3 more

Grover search algorithm is the most representative quantum attack method that threatens the security of symmetric key cryptography. If the Grover search algorithm is applied to symmetric key cryptography, the security level of target symmetric key cryptography can be lowered from n-bit to n2-bit. When applying Grover’s search algorithm to the block cipher that is the target of potential quantum attacks, the target block cipher must be implemented as quantum circuits. Starting with the AES block cipher, a number of works have been conducted to optimize and implement target block ciphers into quantum circuits. Recently, many studies have been published to implement lightweight block ciphers as quantum circuits. In this paper, we present optimal quantum circuit designs of symmetric key cryptography, including PRESENT and GIFT block ciphers. The proposed method optimized PRESENT and GIFT block ciphers by minimizing qubits, quantum gates, and circuit depth. We compare proposed PRESENT and GIFT quantum circuits with other results of lightweight block cipher implementations in quantum circuits. Finally, quantum resources of PRESENT and GIFT block ciphers required for the oracle of the Grover search algorithm were estimated.

Applied Sciences•May 23, 2021•54 citations
The emergence of quantum computing demands rigorous reassessment of classical cryptographic primitives, particularly lightweight block ciphers (LBCs). This work addresses this critical need by presenting the first comprehensive quantum implementation and security analysis of the Feistel-based LBCs SLIM and MIBS against quantum cryptanalysis. Leveraging the inherent reversibility of the ciphers, we develop novel ancilla-free quantum circuits optimizing qubit utilization and depth. For SLIM-80, our design achieves 30,404 quantum cost with 112 qubits and depth of 4,066. For MIBS-64 and MIBS-80, we implement circuits with 23,371 and 24,363 quantum costs requiring 128 and 144 qubits, respectively, and a uniform depth of 4,768. We then quantify vulnerability to Grover’s key-search under the NIST PQC security constraint MAXDEPTH. By constructing Grover oracles under inner parallelization with multiple plaintext-ciphertext pairs to suppress false positives, we demonstrate total attack costs of 2^111 for SLIM-80 and MIBS-80, and 2^94 for MIBS-64. These costs fall below NIST’s Level-1 security threshold 2^170, confirming both ciphers’ susceptibility to quantum threats despite their lightweight efficiency. Our methodology establishes a quantum implementation framework for Feistel ciphers, revealing critical trade-offs among qubit efficiency, depth, and quantum resilience.
Abstract The advent of quantum computing necessitates a rigorous reassessment of classical cryptographic primitives, particularly lightweight block ciphers (LBCs) deployed in resource-constrained environments. This work presents a comprehensive quantum implementation and security analysis of the Feistel-based LBC MIBS against quantum cryptanalysis. Using the inherent reversibility of its structure, we develop a novel ancilla-free quantum circuit that optimizes qubit count and depth. For MIBS-64 and MIBS-80, our implementation achieves quantum costs of 23,371 and 24,363, requiring 128 and 144 qubits, respectively, with a depth of 4,768. We subsequently quantify the cipher’s vulnerability to Grover’s key-search algorithm under the NIST PQC security constraint M A X D E P T H MAXDEPTH\mathtt{M}\mathtt{A}\mathtt{X}\mathtt{D}\mathtt{E}\mathtt{P}\mathtt{T}\mathtt{H}MAXDEPTH . By constructing Grover oracles using inner parallelization with multiple plaintext-ciphertext pairs to suppress false positives, we demonstrate total quantum attack costs of approximately 2 94 for MIBS-64 and 2 111 for MIBS-80. These values fall below NIST’s Level-1 security threshold (2 170 ), confirming the susceptibility of both MIBS variants to quantum key-recovery attacks despite their classical lightweight efficiency.
Abstract We present a novel quantum implementation of SLIM, a lightweight 32/80-bit Feistel cipher. By inverting its Key addition-Substitution-Permutation (KSP) layers without ancillary qubits, we construct the full quantum circuit using 112 qubits with quantum cost 30,404 and depth 4,066. To assess quantum resilience, we implement Grover’s algorithm with three plaintext-ciphertext pairs (r = 3; 337 qubits), yielding an attack cost of 2 111 under NIST’s MAXDEPTH constraints—below the Level-1 threshold 2 170 . While SLIM falls short of NIST’s security threshold for near-term quantum attacks, among other lightweight BCs, its efficient architecture retains practical advantages for constrained applications.
The security of classical symmetric-key primitives is fundamentally challenged by the emergence of quantum computing, necessitating a rigorous evaluation of their post-quantum resilience. This paper presents a comprehensive quantum circuit realization and Grover cryptanalysis of GFSPX, a lightweight block cipher featuring a 64-bit data block and a 128-bit secret key. GFSPX utilizes a unique hybrid architecture that integrates a 4-branch generalized Feistel structure with both Addition-Rotation-XOR (ARX) and Substitution-Permutation Network (SPN) components. Our quantum implementation optimizes resource distribution by exploiting the inherent reversibility of the Feistel network and employing a compact ripple-carry adder for the ARX layers. The proposed architecture achieves a qubit-optimized footprint of 209 qubits with a baseline quantum cost of 32,498 and a circuit depth of 7,617. To evaluate the cipher's resistance against quantum adversaries, we construct a parallelized Grover oracle using three plaintext-ciphertext pairs to eliminate spurious matches. Our analysis reveals that the total quantum cost of a key-recovery attack on GFSPX is 1.12×21591.12 \times 2^{159}1.12×2159 quantum gates. Although this cost falls below the NIST Level 1 security threshold of 21702^{170}2170, the hybrid ARX-SPN design demonstrates a higher quantum attack resistance among other lightweight designs. These findings provide critical insights into the balance between classical efficiency and quantum resilience in next-generation cryptographic designs for resource-constrained environments.
The advent of quantum computing has profound implications for current technologies, offering advancements in optimization while posing significant threats to cryptographic algorithms. Public-key cryptosystems relying on prime factorization or discrete logarithms are particularly vulnerable, whereas block ciphers (BCs) remain secure through increased key lengths. In this study, we introduce a novel quantum implementation of SLIM, a lightweight block cipher optimized for 32-bit plaintext and an 80-bit key, based on a Feistel structure. This implementation distinguishes itself from other BC quantum implementations in its class (64-128-bit) by utilizing a minimal number of qubits while maintaining robust cryptographic strength and efficiency. By employing an innovative design that minimizes qubit usage, this work highlights SLIM's potential as a resource-efficient and secure candidate for quantum-resistant encryption protocols.
Quantum computing plays a vital role in the next generation computing platforms as researchers have achieved quantum supremacy by proving that quantum computers can outperform classical computers. These high performance computers will pose a serious threat to the security of the conventional cryptographic algorithms. The secret key of the conventional cryptographic algorithms when implemented by quantum circuits can easily be recovered with the help of Grover key search algorithm. The Grover’s algorithm requires low cost quantum implementation of cryptographic algorithms in order to mount the quantum key recovery attack successfully. Hence the low cost quantum implementation of conventional cryptographic algorithms to mount quantum key recovery attack using Grover search algorithm is an active area of research. This work proposes a novel quantum circuit implementation of two lightweight block ciphers namely PUFFIN and PRINT and for the first time in literature In-place method is used to optimize the quantum resources in these two ciphers which helps to build compact quantum circuits without extra ancilla inputs. The performance metrics considered in this work to quantify the quantum resources of the proposed circuits are number of quantum gates, quantum cost, latency and number of qubits. In addition, the quantum resources are also estimated to mount the quantum key recovery attacks on the proposed quantum circuit implementations of PUFFIN and PRINT using Grover-based key search algorithm.
Grover search algorithm is the most representative quantum attack method that threatens the security of symmetric key cryptography. If the Grover search algorithm is applied to symmetric key cryptography, the security level of target symmetric key cryptography can be lowered from n-bit to n2-bit. When applying Grover’s search algorithm to the block cipher that is the target of potential quantum attacks, the target block cipher must be implemented as quantum circuits. Starting with the AES block cipher, a number of works have been conducted to optimize and implement target block ciphers into quantum circuits. Recently, many studies have been published to implement lightweight block ciphers as quantum circuits. In this paper, we present optimal quantum circuit designs of symmetric key cryptography, including PRESENT and GIFT block ciphers. The proposed method optimized PRESENT and GIFT block ciphers by minimizing qubits, quantum gates, and circuit depth. We compare proposed PRESENT and GIFT quantum circuits with other results of lightweight block cipher implementations in quantum circuits. Finally, quantum resources of PRESENT and GIFT block ciphers required for the oracle of the Grover search algorithm were estimated.