> This framing does leak two pieces of information about our result: (i) that we are using a classical reversible circuit executed in quantum superposition for the elliptic curve point addition and (ii) that we are using windowed arithmetic.
Deirdre Connolly¹ ²
> We demonstrate that Shor’s algorithm...can execute with either ≤ 1200 logical qubits and ≤ 90 million Toffoli gates or ≤ 1450 logical qubits and ≤ 70 million Toffoli gates
research.google/blog/safegua...
quantumai.google/static/site-...