CNOT circuit synthesis on Matrices used in block ciphers
3Circuit DepthZH23
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| ZH23Cipher=MIDORI, Size=162025.11 | 3 | 24 | |
| dBBV+21bCipher=MIDORI, Size=162025.11 | 3 | 24 | |
| SF24Cipher=MIDORI, Size=162025.11 | 3 | 24 | |
| circulant_synthCipher=MIDORI, Size=16, Heuristic=[SF24] without fallback2025.11 | 3 | 24 | |
| ZH23Cipher=PRIDE L0, Size=162025.11 | 3 | 24 | |
| dBBV+21bCipher=PRIDE L0, Size=162025.11 | 3 | 24 | |
| SF24Cipher=PRIDE L0, Size=162025.11 | 3 | 24 | |
| circulant_synthCipher=PRIDE L0, Size=16, Heuristic=[SF24] without fallback2025.11 | 3 | 24 | |
| dBBV+21bCipher=PRIDE L3, Size=162025.11 | 3 | 24 | |
| SF24Cipher=PRIDE L3, Size=162025.11 | 3 | 24 | |
| dBBV+21bCipher=PRINCE M0, Size=162025.11 | 3 | 24 | |
| SF24Cipher=PRINCE M0, Size=162025.11 | 3 | 24 | |
| dBBV+21bCipher=PRINCE M1, Size=162025.11 | 3 | 24 | |
| SF24Cipher=PRINCE M1, Size=162025.11 | 3 | 24 | |
| dBBV+21bCipher=QARMA64, Size=162025.11 | 3 | 24 | |
| SF24Cipher=QARMA64, Size=162025.11 | 3 | 24 | |
| circulant_synthCipher=QARMA64, Size=16, Heuristic=[SF24] without fallback2025.11 | 3 | 24 | |
| dBBV+21bCipher=QARMA128, Size=322025.11 | 3 | 48 | |
| SF24Cipher=QARMA128, Size=322025.11 | 3 | 48 | |
| YWS+24Cipher=MIDORI, Size=162025.11 | 4 | 24 | |
| circulant_synthCipher=PRIDE L3, Size=16, Heuristic=[SF24] without fallback2025.11 | 4 | 24 | |
| circulant_synthCipher=PRINCE M0, Size=16, Heuristic=[SF24] without fallback2025.11 | 4 | 28 | |
| circulant_synthCipher=PRINCE M1, Size=16, Heuristic=[SF24] without fallback2025.11 | 4 | 28 | |
| ZH23Cipher=PRIDE L3, Size=162025.11 | 5 | 24 | |
| ZH23Cipher=QARMA64, Size=162025.11 | 5 | 24 | |
| ZH23Cipher=QARMA128, Size=322025.11 | 5 | 48 | |
| YWS+24Cipher=QARMA128, Size=322025.11 | 5 | 48 | |
| ZH23Cipher=PRINCE M0, Size=162025.11 | 6 | 24 | |
| ZH23Cipher=PRINCE M1, Size=162025.11 | 6 | 24 | |
| SF24Cipher=Joltik, Size=162025.11 | 7 | 52 | |
| circulant_synthCipher=QARMA128, Size=32, Heuristic=[SF24] without fallback2025.11 | 7 | 96 | |
| circulant_synthCipher=Joltik, Size=16, Recursion depth=1, Heuristic=[SF24] without fallback2025.11 | 8 | 52 | |
| circulant_synthCipher=SmallScale AES, Size=16, Recursion depth=1, Heuristic=[SF24] without fallback2025.11 | 8 | 53 | |
| YWS+24Cipher=Joltik, Size=162025.11 | 9 | 48 | |
| dBBV+21bCipher=Joltik, Size=162025.11 | 9 | 48 | |
| SF24Cipher=AES, Size=322025.11 | 10 | 131 | |
| circulant_synthCipher=AES, Size=32, Recursion depth=2, Heuristic=[SF24] without fallback2025.11 | 10 | 107 | |
| ZSWS24Cipher=AES, Size=322025.11 | 10 | 105 | |
| SF24Cipher=Anubis, Size=322025.11 | 10 | 119 | |
| circulant_synthCipher=Anubis, Size=32, Recursion depth=1, Heuristic=[SF24] without fallback2025.11 | 10 | 117 | |
| SF24Cipher=Clefia M0, Size=322025.11 | 10 | 110 | |
| circulant_synthCipher=Clefia M0, Size=32, Recursion depth=1, Heuristic=[SF24] without fallback2025.11 | 10 | 120 | |
| SF24Cipher=Clefia M1, Size=322025.11 | 10 | 128 | |
| YWS+24Cipher=SmallScale AES, Size=162025.11 | 10 | 46 | |
| SF24Cipher=SmallScale AES, Size=162025.11 | 10 | 62 | |
| circulant_synthCipher=Clefia M1, Size=32, Recursion depth=1, Heuristic=[SF24] without fallback2025.11 | 11 | 124 | |
| dBBV+21bCipher=SmallScale AES, Size=162025.11 | 11 | 59 | |
| dBBV+21bCipher=AES, Size=322025.11 | 12 | 128 | |
| YWS+24Cipher=AES, Size=322025.11 | 13 | 98 | |
| dBBV+21bCipher=Clefia M0, Size=322025.11 | 13 | 126 | |
| YWS+24Cipher=Clefia M1, Size=322025.11 | 13 | 106 | |
| dBBV+21bCipher=Clefia M1, Size=322025.11 | 13 | 127 | |
| YWS+24Cipher=Anubis, Size=322025.11 | 14 | 102 | |
| dBBV+21bCipher=Anubis, Size=322025.11 | 14 | 136 | |
| YWS+24Cipher=Clefia M0, Size=322025.11 | 15 | 105 | |
| ZH23Cipher=Clefia M1, Size=322025.11 | 16 | 103 | |
| ZH23Cipher=Joltik, Size=162025.11 | 17 | 44 | |
| circulant_synthCipher=Whirlwind M0, Size=32, Recursion depth=1, Heuristic=[SF24] without fallback2025.11 | 17 | 200 | |
| ZH23Cipher=SmallScale AES, Size=162025.11 | 19 | 43 | |
| circulant_synthCipher=Whirlwind M1, Size=32, Recursion depth=1, Heuristic=[SF24] without fallback2025.11 | 19 | 241 | |
| ZH23Cipher=Anubis, Size=322025.11 | 20 | 98 | |
| SF24Cipher=Whirlwind M1, Size=322025.11 | 22 | 290 | |
| dBBV+21bCipher=Whirlwind M1, Size=322025.11 | 25 | 279 | |
| ZH23Cipher=Clefia M0, Size=322025.11 | 27 | 98 | |
| ZH23Cipher=AES, Size=322025.11 | 28 | 92 | |
| dBBV+21bCipher=Whirlwind M0, Size=322025.11 | 28 | 286 | |
| SF24Cipher=Whirlwind M0, Size=322025.11 | 28 | 331 | |
| YWS+24Cipher=Whirlwind M0, Size=322025.11 | 46 | 249 | |
| YWS+24Cipher=Whirlwind M1, Size=322025.11 | 50 | 264 | |
| ZH23Cipher=Whirlwind M0, Size=322025.11 | 51 | 183 | |
| ZH23Cipher=Whirlwind M1, Size=322025.11 | 54 | 190 |