Paper 2023/286

DORCIS: Depth Optimized Quantum Implementation of Substitution Boxes

Matthew Chun, Amherst College, Massachusetts, USA
Anubhab Baksi, Nanyang Technological University, Singapore
Anupam Chattopadhyay, Nanyang Technological University, Singapore

In this paper, we present the ``DORCIS'' tool, which finds depth-optimized quantum circuit implementations for arbitrary 3- and 4-bit S-boxes. It follows up from the previous LIGHTER-R tool (which only works for 4-bit S-boxes) by extending it in multiple ways. LIGHTER-R only deals at the top level (i.e., Toffoli gates), whereas DORCIS takes quantum decomposition (i.e., Clifford + T gates) into account. Further, DORCIS optimizes for quantum depth and T depth. We match, if not surpass, other optimized quantum circuit implementations put forth in the other papers. Similar to LIGHTER-R, our tool is also easy to use, and we provide an extended interface to IBM's Qiskit.

Available format(s)
Secret-key cryptography
Publication info
S-boxQuantum ComputingOptimized ImplementationLIGHTER-R
Contact author(s)
machun24 @ amherst edu
anubhab baksi @ ntu edu sg
anupam @ ntu edu sg
2023-04-09: last of 4 revisions
2023-02-25: received
See all versions
Short URL
Creative Commons Attribution-NonCommercial-NoDerivs


      author = {Matthew Chun and Anubhab Baksi and Anupam Chattopadhyay},
      title = {{DORCIS}: Depth Optimized Quantum Implementation of Substitution Boxes},
      howpublished = {Cryptology ePrint Archive, Paper 2023/286},
      year = {2023},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.