Low-Communication Parallel Quantum Multi-Target Preimage Search

Published in In *Selected Areas in Cryptography* (SAC), 2017

This paper proposes a new quantum algorithm for multi-target preimage search that achieves asymptotic improvements in parallel quantum settings.

Key points:

  • Improves upon the van Oorschot–Wiener rho method in the quantum regime
  • Exploits the presence of multiple targets for better resource tradeoffs
  • Challenges NIST’s assumptions on AES-128, AES-192, and AES-256 quantum resistance
  • Suggests that multi-key Grover search may be more efficient than sequential search

This work motivates a re-evaluation of symmetric key security claims in the NIST post-quantum guidelines.

Recommended citation: Gustavo Banegas, Daniel J. Bernstein. (2017). "Low-Communication Parallel Quantum Multi-Target Preimage Search." In Selected Areas in Cryptography (SAC).
Download Paper | Download Slides | Download Bibtex