Paper 2021/668

Grover on SM3

Gyeongju Song, Kyungbae Jang, Hyunji Kim, Wai-Kong Lee, Zhi Hu, and Hwajeong Seo


Grover search algorithm accelerates the key search on the symmetric key cipher and the pre-image attack on the hash function. In order to perform Grover search algorithm, the target algorithm should be implemented in a quantum circuit. For this reason, we propose an optimal SM3 hash function (Chinese standard) in a quantum circuit. We focused on minimizing the use of qubits together with reducing the use of quantum gates. To do this, the on-the-fly approach is utilized for message expansion and compression functions. In particular, the previous value is restored and used without allocating new qubits in the permutation operation. Finally, we estimate quantum resources required for the quantum pre-image attack based on the proposed SM3 hash function implementation in the quantum circuit.

Available format(s)
Publication info
Preprint. MINOR revision.
Quantum ComputerGrover AlgorithmSM3 Hash Function
Contact author(s)
hwajeong84 @ gmail com
2021-06-18: last of 3 revisions
2021-05-25: received
See all versions
Short URL
Creative Commons Attribution


      author = {Gyeongju Song and Kyungbae Jang and Hyunji Kim and Wai-Kong Lee and Zhi Hu and Hwajeong Seo},
      title = {Grover on SM3},
      howpublished = {Cryptology ePrint Archive, Paper 2021/668},
      year = {2021},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.