FEATURE Q

Abstract

Gauging a quantum algorithm’s practical significance requires weighing it against the best conventional techniques applied to useful instances of the same problem. The authors show that several commonly suggested applications of Grover’s quantum search algorithm fail to offer computational improvements over the best conventional algorithms. 1521-9615/05/$20.00 © 2005 IEEE Copublished by the IEEE CS and the AIP Some researchers suggest achieving massive speedups in computing by exploiting quantum-mechanical effects such as superposition (quantum parallelism) and entanglement. 1 A quantum algorithm typically consists of applying quantum gates to quantum states, but because the input to the algorithm might be normal classical bits (or nonquantum), it affects only the selection of quantum gates. After all the gates are applied, quantum measurement is performed, producing the algorithm’s nonquantum output. Deutsch’s algorithm, for instance, solves a certain artificial problem in fewer steps than any classical (nonquantum) algorithm, and its relative speedup grows with the problem size. However, Charles Bennett and his colleagues2 have shown that quantum algorithms are unlikely to solve NP-complete problems in polynomial time, although more modest speedups remain possible. Peter Shor designed a fast (polynomial-time) quantum algorithm for number factoring—a key problem in cryptography that isn’t believed to be NP-complete. No classical