Paper 2025/1801
Quantum Circuit Implementation and Resource Analysis of AIM2
Abstract
In this paper, we propose a quantum circuit implementation of AIM2. We apply optimization to reduce the circuit depth and introduce a method to reuse qubits by performing inverse operations in parallel. For all AIM2 variants (AIM2-I, AIM2-III, AIM2-V), we design quantum circuits for $\mathsf{Mer}^{-1}$, the linear layer, $\mathsf{Mer}$, and feed-forward. We confirm that the $\mathsf{Mer}^{-1}$ operation dominates the overall cost. Compared to the previous version of AIM, AIM2 requires significantly more quantum resources since it introduces $\mathsf{Mer}^{-1}$ before the linear layer. Based on the proposed circuits, we estimate the cost of Grover's algorithm for key search and compare it with the NIST estimates for AES. As a result, AIM2-I, AIM2-III, and AIM2-V achieve the post-quantum security levels of Level-1, Level-3, and Level-5, respectively.
Metadata
- Available format(s)
-
PDF
- Category
- Implementation
- Publication info
- Preprint.
- Keywords
- Quantum ImplementationQuantum ComputingAIM2AIMerGrover's algorithm
- Contact author(s)
-
thdrudwn98 @ gmail com
starj1023 @ gmail com
sebbang99 @ gmail com
minunejip @ gmail com
hwajeong84 @ gmail com - History
- 2025-10-08: approved
- 2025-10-02: received
- See all versions
- Short URL
- https://ia.cr/2025/1801
- License
-
CC0
BibTeX
@misc{cryptoeprint:2025/1801,
author = {Gyeongju Song and Kyungbae Jang and Seyoung Yoon and Minwoo Lee and Hwajeong Seo},
title = {Quantum Circuit Implementation and Resource Analysis of {AIM2}},
howpublished = {Cryptology {ePrint} Archive, Paper 2025/1801},
year = {2025},
url = {https://eprint.iacr.org/2025/1801}
}
