Slashdot Mirror


Quantum Computing Breakthrough in Japan

An anonymous reader writes "A research team funded by NEC and RIKEN, Japan's Institute of Physical and Chemical Research, are the first to demonstrate a Controlled NOT (CNOT) quantum gate. The CNOT gate when coupled with a rotational gate would create a universal gate. The universal gate would be the basis for quantum computing. ETA for the first quantum computers: 10 to 100 years." When quantum computers first come to fruition, the best part will be reminiscing about how terrible computers were "back in the day."

74 of 438 comments (clear)

  1. A couple of Thoughts by ericspinder · · Score: 4, Funny
    With that much computer power.
    • So much for 128 bit encryption or 512, etc
    • SETI would run out of signals to process
    If you crash your quantum computer would you rip a hole in the space-time continum. Maybe that is how black holes get started; one for every planet that just gets to this point and then loads Windows on a quantum computer.
    --
    The grass is only greener, if you don't take care of your own lawn.
    1. Re:A couple of Thoughts by Anonymous Coward · · Score: 5, Funny

      This black hole brought to you by Microsoft!

      "And you thought we sucked before!"

      --
      actually, no. the universe doesnt crash.. least not yet..

    2. Re:A couple of Thoughts by Bingo+Foo · · Score: 4, Informative
      No, mathematical encryption today relies on the rate at which certain problems get harder to solve with increasing size. A non-polynomial scaling problem is, for all practical purposes, an impossible problem to solve when made bigger. That's why 4096 bit encryption will never be subject to a distributed crack competition (on classical computers). It's just so much harder than 64 bit. A quantum computer which could reduce such problems to polynomial time could solve not only 4096-bit, but 65536-bit and 4294967296-bit encryption in human-scale amounts of time (even if it's several years), instead of the millions of universe ages that Moore's Law tracking classical machines would require.

      The availability of quantum computers for encryption cracking will just result in a change to another type of cryptography that does not rely on the unproven assumption that factorizing large integers is NP hard. These future encryption methods may be less mathematical and more physical.

      --
      taken! (by Davidleeroth) Thanks Bingo Foo!
    3. Re:A couple of Thoughts by God!+Awful+2 · · Score: 2, Informative


      Yeah but encryption will catch up just as fast. You can break codes from WW2 now with what? A 486DX and 15 seconds of CPU time? It's all relative. Besides, we should all be using OTPs anyway ;)

      A little knowledge is a dangerous thing... keyword here being "little". Allow me to correct a few points:

      1. No, encryption won't catch up just as fast. Currently, encryption enjoys a Big-Oh advantage over brute force cracking. Encryption is O(1) and cracking is O(n). [n is keyspace, not key bits]. If quantum computers take away that advantage, encryptions will not "catch up just as fast".

      2. No, you can't break codes from WW2 with 15 seconds of CPU time on a 486. Enigma was broken in WW2 due to a weakness in the cipher. The later Enigma machines had 67 key bits. That's a fair bit more than DES. No way could you crack that (by brute force) on a 486.

      3. "Besides, we should all be using OTPs anyway." Not sure if this is ignorance or a weak attempt at a joke.

      -a

    4. Re:A couple of Thoughts by child_of_mercy · · Score: 3, Interesting

      I'm not so sure one time pads will hold up to quantum mathematics where state or position are the key elements.

      as long as a solution exists. not matter how improbable, it can be arrived at, as the gates in superposition go through all the possibilities simultaneously.

      so, to my admittedly limited understanding, where brute forcing means it's statistically likely you'll crack conventional encryption after a certain limited number of iterations, and a certainty once you exhaust all the possibilities, unless the chance of brute forcing an OTP is exactly infinite then it's still going to be a snap to a machine that evaluates all states simultaneously.

      But i don't pretend to have a deep understanding of the field.

      So I promise not to get upset if someone now brutally demolishes my thinking

      --
      'There is a Light that never goes out.'
    5. Re:A couple of Thoughts by amRadioHed · · Score: 2, Informative

      as long as a solution exists. not matter how improbable, it can be arrived at, as the gates in superposition go through all the possibilities simultaneously.

      Well that's the catch. Yeah, a solution exists, but it's impossible to know if you have found it. If you have a message of length N encoded with a one time pad, then any possible message of length N is an equally valid solution. So if I send a message where n is 23, it could be decoded as "We attack at one thirty" or I could be saying "The pizza was real good", or any number of other solutions. To someone without the pad it's impossible to tell which is right.

      --
      We hope your rules and wisdom choke you / Now we are one in everlasting peace
    6. Re:A couple of Thoughts by cfallin · · Score: 5, Informative

      OTP works by having a completely random key that is as long as the data itself. It is then combined with the data in some way (say, for example, XOR) and reversed at the other end given the correct key.

      The key (no pun intended) here is that there is no way to know when you have the correct key. With the XOR example, there exist keys that will produce every possible combination of output bits, and no way to tell which one is right. So trying to decrypt it is no different than generating random bit patterns the length of the data and seeing which output "looks right" - even looking for outputs that are valid English, you will encounter every possible sentence of the given data length.

    7. Re:A couple of Thoughts by Rich0 · · Score: 2, Interesting

      In case anyone has doubts about this think of a simple illustration. Suppose my key is "1" - as in the number 1 - as in one bit long. My cipher method is to add the key bit to the ASCII code, wrapping around. Hello becomes Ifmmp. That would take somebody reading the sunday paper all of 5 minutes to crack. Just using it one time wouldn't help.

      On the other hand, suppose my key is 1,2,3,4,5 - making the message "Hello" turn into "Igopt". Now let me brute-force that - let's try 25,6,22,1,6. Whoa - lucky guess, the message was "Jason"! Boy, we sure cracked that system!

      The whole point with a OTP is that you can find a key that will yield ANY message - and there is no way to know if it is right or not!

      And the algorithm isn't all that importang - the simple alphabet-shift cipher is just fine when using OTP - although XOR tends to be more popular since it is easier to apply/reverse (assuming you have a calculator).

    8. Re:A couple of Thoughts by Rich0 · · Score: 2, Informative

      Nah - you first send a random one time pad through the link. If not intercepted you send the real message off the link, encrypted with the one time pad. You need both to crack the message. If the pad was evesdropped you just toss it and try again. You could even keep using the same line hoping that the evesdropper would ignore one of the messages - if he lets a message pass unintercepted you could use that key to safely transmit the real message.

  2. I'm working on my own quantum computer by Dancin_Santa · · Score: 5, Funny

    But that's really neither here nor there.

    1. Re:I'm working on my own quantum computer by slickwillie · · Score: 2, Funny

      In related news, my cat disappeared and a CNOT gate took his place for second.

    2. Re:I'm working on my own quantum computer by swingkid · · Score: 3, Funny

      This may say more about my sense of humor, but that's one of the funniest things I've ever seen on slashot.

  3. What is going to run on these computers? by Apoptosis66 · · Score: 4, Interesting

    We are already hitting the limits of how much code can work together without being riddled by bugs. I think we need a advance in programming first.

    1. Re:What is going to run on these computers? by supun · · Score: 3, Funny

      Unreal Tournament 2104

      --
      :w!
    2. Re:What is going to run on these computers? by Seraphim_72 · · Score: 2, Interesting

      I disagree.

      Consistent, user frienldy computing is not ubiquitous now, faster processing does not equate to better control, all it means is that we can all BSOD in a fraction of a second instead of in 30 seconds. We can build many things that we cannot control; Highways (who needs a speed limit when I am drunk?), a-bombs (hey, how is North Korea these days?) even daycare centers (Oh, dont worry, the kids are *fine*). What to poster was saying was the processor we use today is insanely faster than the Pentium 100 of yester year, yet the programming , even the software does not take advantage of that speed. Where are the deskops that use my 256MB video card? - where are the Apps that do? - hell, I got video to spare - yet no one but games uses it - and few people are even trying, this amount of computing is going down the drain with each CPU cycle, yet we want more.

      Sure - the quantum computer will run Debian, or Mandrake or even (shudder) Windows - but why should it? With 100 or 1000 times the speed what is the point? He is asking what advancements in programming do we need to keep up with the pace of compuing power. Coding every 'If....then' to make a photo-realistic environment for plant simulation for your backyard over the next thirty years is just plain stupid. What he is asking for are better tools to do the job with. The "Great Promise" of OO Design has been reuse - so - where are my Objects? - and even better - Where are my 'Super Objects' and where is the Language to use those Super Objects as just that - objects - not raw code?

      Just my thoughts

      -Sera

      --
      Slashdot, where armchair scientists get shouted down and armchair theologians get modded up.
    3. Re:What is going to run on these computers? by MyHair · · Score: 2, Funny

      Don't you mean Duke Nukem Forever?

    4. Re:What is going to run on these computers? by Ignominious+Cow+Herd · · Score: 3, Funny

      we'll have to say goodbye to https, ssh, pgp, etc.

      No more etc!? Where will we put all our configuration files?

      --
      Lump lingered last in line for brains, and the ones she got were sorta rotten and insane.
  4. Re:And with this first step... by bigberk · · Score: 4, Insightful
    All of todays encryption becomes irrelevant

    Not for a while, but it really does make you wonder. Pretty much all of the strongest encryption we have to date (except huge one-time pads shared between parties) rely on classical crypto: it's all about computational infeasibility of solving certain equations.

    Quantum computing does have the potential to make this obsolete. All SSL -- used by banks, governments, might be breakable. PGP would be breakable.

    It seems reasonable that governments will tightly control developments in this field once they catch on to what's at stake. IMHO, an enemy with the power to break classical crypto is a much greater threat than a jackass carrying an exacto knife.

  5. Quantum Computers by Henry+V+.009 · · Score: 2, Insightful

    Quantum! The name does sound kind of cool. But try programming for one for a little while. That is something that you can do today with a simulator.

    The only use for quantum computers in the future will be cryptography and very specially formulated problems. It won't run Quake VII or Windows 2015.

    (Then again, if you chart processor and memory usage, you will find that nothing will run Windows 2015)

    1. Re:Quantum Computers by geekoid · · Score: 4, Funny

      yes, and well only need, maybe, 5 in the world...

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    2. Re:Quantum Computers by 00420 · · Score: 5, Funny

      Then again, if you chart processor and memory usage, you will find that nothing will run Windows 2015

      At least call it by its proper codename. It's called Longhorn, not Windows 2015

  6. No more encryption? by Rimbo · · Score: 4, Interesting

    I think that modern encryption schemes could be broken really quickly.

    Imagine what kind of encryption you could do with quantum computing. When the first computers were built, most of the standard methods of encryption became obsolete -- ones that usually involved simple letter-substitution. That wasn't the end of encryption; those same computers enabled new ways to encrypt messages.

    So it stands to reason that the existence of quantum computers would lead to new quantum encryption methods, which would take millions of years for the best quantum computers to crack using brute-force.

    1. Re:No more encryption? by ultitool · · Score: 5, Informative

      Modern schemes wouldn't be necessary because quantum cryptography would become the standard and is proven to be unbreakable by the laws of quantum mechanics. Any interaction (malicious or otherwise) of a third party is noticable to the proper parties and the message/key transmission is just repeated until a clean send is achieved.
      Here, here and google (of course) provide some good reading if you're interested

      --
      If You Drink, Don't Park, Accidents Cause People.
    2. Re:No more encryption? by 222 · · Score: 3, Informative

      You shouldnt confuse quantum computing with quantum cryptography. Quantum cryptography, even with a quantum computer, would still be unbreakable because of how it utilizes the randomness of photons, one time pads, and one hell of an anti-easedropping mechanism.
      Quantum computing would also have a far more severe impact on modern cryptography than breaking it "really quickly". With the ability to instantly factor every large prime, for example, it would nullify the best we've got.

    3. Re:No more encryption? by roystgnr · · Score: 4, Insightful

      Modern schemes wouldn't be necessary because quantum cryptography would become the standard and is proven to be unbreakable by the laws of quantum mechanics.

      Doesn't quantum cryptography require a point to point optic channel capable of successfully transmitting individual photons without interfering with their polarization (as well as detectors and receivers for such)? Even if people get fiber optic lines to their homes in the next few decades, I'm pretty sure we'll never see anything like that available to home users. If you want unbreakable cryptography today, you can use a one time pad with less inconvenience.

    4. Re:No more encryption? by kidlinux · · Score: 2, Interesting

      Consider the amount of encrypted data currently in existance. Once quantum computers come about, access to all of this data would be trivial.

      I imagine there are governments which are just frothing at the mouth over quantum computers. They'd have access to hordes of encrypted data that they've no doubt been saving for just such an occasion.

      And until everyone has a quantum computer, not all data will be securely encryptable.

      --
      -kidlinux.
    5. Re:No more encryption? by necama · · Score: 2, Interesting
      Imagine what kind of encryption you could do with quantum computing. When the first computers were built, most of the standard methods of encryption became obsolete -- ones that usually involved simple letter-substitution. That wasn't the end of encryption; those same computers enabled new ways to encrypt messages.

      Bennet and Brassard showed in 1984 that you could use quantum information methods to distribute a one time pad securely, with anybody trying to interrupt the stream corrupting the pad, making both the copy recieved by the legitimate user and the copy recieved by the interloper different than the one used by the sender. These systems are being implemented as we speak. IBM has a system that will cover 20 miles through fiber, and LANL has a system that will cover almost 5 miles through open air.

    6. Re:No more encryption? by freshmkr · · Score: 4, Funny

      With the ability to instantly factor every large prime, for example, it would nullify the best we've got.

      Nonsense! I can instantly factor every large prime--in my head!!

      You can too.

      --Tom

    7. Re:No more encryption? by Anonymous Coward · · Score: 2, Informative
      Doesn't quantum cryptography require a point to point optic channel capable of successfully transmitting individual photons without interfering with their polarization?

      You can do it in open air, even during the daytime using optical frequency photons. That's what the folks at Los Alamos are doing. They have a range of about 10km now, and think that a satellite implementation should be feasible. If that happens (and you can trust the satellite) it would in principle enable secure communication anywhere.

      Of course, right now the bit rate is pretty low (about 45,000 secret bits/hour in daylight, better at night), but that is mostly due to low yield on the detectors, which could hopefully improve over the next several years.

  7. hmm... hardware outpaces software again? by Shakrai · · Score: 2, Interesting

    Is it just me, or in the last few years (as a result of AMD vs Intel perhaps?) that hardware has generally outpaced software.

    Sure, a lot of us (myself included) want the "bleeding edge" system, but in reality, even my (now three year old) AMD 750 is still a decent enough system. Whereas I recall "back in the day" being worried about system requirements everytime I bought a piece of software -- only six or nine months after I bought my first PC (a 486DX-4 100).

    Does anyone see software catching up (in the consumer market)? How long until we have an end-user quantum computer? And how hard will it be to defeat the built in DRM ;)

    --
    I want peace on earth and goodwill toward man.
    We are the United States Government! We don't do that sort of thing.
    1. Re:hmm... hardware outpaces software again? by bruthasj · · Score: 3, Funny

      Yeah! It's called J2EE. You should check it out sometime. I'm sure the next incarnation, J3EE, will suck the living juice out of any quantum computer thrown at it.

    2. Re:hmm... hardware outpaces software again? by Epistax · · Score: 2, Funny

      Just want until it turns on Longhorn is based on the Doom3 engine. Then you'll be lucky to play solitaire without lag.

  8. The Reason Progress Is So Slow by Myriad · · Score: 4, Funny
    The real reason why the development of quantum computers is going so slow is pretty simple: everytime they check on their progress they lose the damned thing!

    (with appologies to Mr. Heisenberg)

    Blockwars: realtime, multiplayer, and free!

    --
    "They do not preach that their god will rouse them, a little before the Nuts work loose." Kipling, 'The Sons of Martha'
  9. Factoring in the effects of computational advances by HalfFlat · · Score: 4, Funny

    From the article,

    That means calculations, such as working out the factors of prime numbers, which present problems for even the fastest supercomputers could be trivialized by a quantum computer.

    Once they get prime numbers licked, they'll move on to the composite ones. To live in such heady times!

  10. Re:/.'ed? No worries: by mike_g · · Score: 4, Funny

    That means calculations, such as working out the factors of prime numbers, which present problems for even the fastest supercomputers could be trivialized by a quantum computer.

    Hell, I have an awesome algorithm that runs in O(1) time for determining the factors of prime numbers, but no one is writing a news story about me.

  11. What if .... by 2Bits · · Score: 3, Interesting

    What if we really achieve breakthrough and can really make usable quantum computers, while we still couldn't break through the math bottleneck, and all crypto suddenly become irrelevant?

    Now we have a computer that can break all crypto, and we have no new crytpo algo that would make even a quantum computer crack for millions of years, would the governments in the world allow manufacturing of such a beast?

  12. I have a quantum computer too.. by Epistax · · Score: 4, Funny

    I don't know where it is, but it's moving at exactly 3.65 m/s.

  13. The Nintendo Game Qubit. by NanoGator · · Score: 2, Funny

    "ETA for the first quantum computers: 10 to 100 years."

    I predict Duke Nukem Forever will be a launch title for the Nintendo Game Qubit.

    --
    "Derp de derp."
  14. Re:And with this first step... by A+non+moose+cow · · Score: 2, Insightful

    "All of todays encryption becomes irrelevant"

    and all of tomorrows encryption becomes relevant.

  15. They're fixing them? by The+Munger · · Score: 5, Funny

    When quantum computers first come to fruition, the best part will be reminiscing about how terrible computers were "back in the day."

    No, they'll still be terrible. They'll just be terrible really quickly.

    --
    Refuse to make a statement in your sig!
  16. speaking of OTPs by Shakrai · · Score: 2, Interesting

    Has anyone ever implemented one for a VPN? I had considered writing a quick one, mainly for the time honored reason of "Because we can", but in all seriousness, with DVD-Rs why isn't this feasible (assuming you can make a safe exchange of the media). 4 gigs is a _lot_ of data (hell, even an old fashion CD-R at 700 megs is). You could even get further mileage out of it by compressing the data before you encrypted it. Creating the code itself is child's play -- that's the beauty of OTPs.

    What's the best way of generating the random data you need in the first place? How random does it truly have to be? I read somewhere that the way the Government does it is to use radio noise. I've never heard a better way (though I hope RIAA doesn't found out ;) that would be as easy to implement.

    --
    I want peace on earth and goodwill toward man.
    We are the United States Government! We don't do that sort of thing.
    1. Re:speaking of OTPs by rusty0101 · · Score: 2, Informative

      One of the problems they have found with radio noise is that if you take your samples too close together you get too many strings of either 1111, 0000, or 10101010. While all three of these strings, as well as many of the permutations are perfectly normal as part of a truely random process, it doesn't do much for your encryption process if you xor your raw text with a string of zeros.

      The problem with most algorythmic random number generators is that if you can collect enough samples you can figure out what function created those samples, and reproduce the original OTP and decrypt the original message.

      For messages that are not extreamly complex, it is often better to use a code instead of a cypher. The difference being a cypher takes the original message, and sends it encrypted with a key that when applied properly returns the original message. A code is generally harder to decrypt simply because the original message is not transmited. Only a reference to that message is sent.

      As an example if you and I agree that one light means that the rascals are going to road march into town, and two lights means that they have figured out how to use boats, you have a simple code that can be used to send a simple message many miles without having someone in the middle. The rascals using the boats are also very unlikely to decode the message.

      More complex messages would require more complex codes being sent. A CD, or a DVD would potentially provide enough raw space as a code book, but you would want to be very sure that no-one who was not supposed to, got copies of the disk. (no sharing them via p2p networks).

      The longstanding myth was that you could recognize the Russian spy operatives because they always carried around big heavy books. War and Peace might have been long, dull and boring for a reason.

      -Rusty

      --
      You never know...
    2. Re:speaking of OTPs by wirelessbuzzers · · Score: 2, Informative

      The problem with most algorythmic random number generators is that if you can collect enough samples you can figure out what function created those samples, and reproduce the original OTP and decrypt the original message.

      Yes, but with a decent strong pseudo-random number generator, this is equivalent to breaking the crypto algorithm they're based on. Consider even the most basic counter-mode cipher, where output block n is e_k(n), where k is the secret key. Predicting the next output from a bunch of data (other than that it's not one of the ones you've already seen) is equivalent to a known-plaintext attack on the cipher.

      There are ciphers called "stream ciphers" that generate random-looking data from a short key, then you XOR it with your message. RC4 is the best-known one, and many programmers have the (very simple) algorithm memorized. There is no publically-known way to figure out the key from the samples.

      More complex messages would require more complex codes being sent. A CD, or a DVD would potentially provide enough raw space as a code book...

      This is just silly. If you want theoretical unbreakability, you put a one-time pad on the CD. If you want practical unbreakability (as far as anyone knows outside the government), you encrypt the message with a symmetric key, then encrypt the symmetric key with the recipient's public key and send it.

      The longstanding myth was that you could recognize the Russian spy operatives because they always carried around big heavy books. War and Peace might have been long, dull and boring for a reason.

      War and Peace would make a lousy codebook, because anyone can get a copy. Once they guess you're using War and Peace, and how you're using it, the code is broken, so the secret might as well be just the code itself.

      --
      I hereby place the above post in the public domain.
  17. Some facts about Quantum Computing by vlad_petric · · Score: 5, Informative
    CNOT has been done before. IBM in fact has demonstrated Shor's algorithm on 15 (the smallest number that can be factorized with that algorithm). This required 7 qubits.

    In a regular computer, data flows through "static" gates. In a quantum computer, the data (qubits) is stationary and the "gates" are in fact carefully crafted laser pulses (the article is not very specific about this particular CNOT gate though)

    1-2 qubits is easy. More qubits are quite difficult to put together. That's why most of the current quantum computers barely do 10 qubits.

    Errors are of analogical nature. Correcting them (with Q-ECC codes) is quite expensive - a more reliable qubit requires a couple normal qubits and gates (I say more reliable because the whole thing is probabilistic)

    Quantum data is very "transient" - it cannot be copied. It can be teleported however (teleportation destroys the source). Storage is however difficult (keeping a superposition of qubits coherent for humanly-observable times is almost intractable)

    A quantum computer can do an operation on 2^k superpositions at the same time (in other words, exponential work in constant time). Selecting the "right" answer from the superposition of 2^k results takes however 2^(k/2) (Lov Grover's algorithm) - so it's still exponential. This is one of the reasons quantum computers were not shown to be more powerful than regular ones (i.e QP != P) . Yes, Shor's factorization algorithm works in polynomial time on quantum computers, and is furthermore quite efficient, but factorization has been shown to be in P anyway (although the current "regular" algorithm is not efficient at all)

    --

    The Raven

    1. Re:Some facts about Quantum Computing by dirtydamo · · Score: 5, Informative

      Shor's factorization algorithm works in polynomial time on quantum computers, and is furthermore quite efficient, but factorization has been shown to be in P anyway (although the current "regular" algorithm is not efficient at all)


      No, factorization has NOT been shown to be in P (or at least, I have never heard of this -- care to give references)?

      Primality proving was recently shown to be in P, but that is a much easier problem.

    2. Re:Some facts about Quantum Computing by necama · · Score: 3, Informative

      Last I checked, the best algorithms for factoring were still in NP; otherwise public key encryption would never be trusted for anything.

      For that matter, the same algorithm, with very little change, also solves the discrete log problem and the hidden subgroup problem in polynomial time.

      As for quantum data being "transient," it is true that most of the quantum information systems have decoherence problems. But, if memory serves, there are some with coherence times that can be measured in seconds. With refocusing techniques, you could probably hold onto a qubit state all day in those systems.

      It'll be a while before we're ready to do that, though.

      And, as others have pointed out, this is hardly the first time anybody has shown a CNOT gate. Chuang did this at IBM a few years back at least as part of his implementation of Shor's Algorithm to factor 15. I also believe it has been shown in a few other systems, but I'd need to dig through some archives first and track references.

    3. Re:Some facts about Quantum Computing by Anonymous Coward · · Score: 2, Insightful

      CNOT has been done before. IBM in fact has demonstrated Shor's algorithm on 15 (the smallest number that can be factorized with that algorithm). This required 7 qubits.

      If I remember correctly, the IBM experiment was done in a fluid state NMR system and as I understand it, they slightly cheat. They tackle the problem of decoherence, by throwing out non-coherent samples. However, all their quantum registers have to be within the same molecule and individualy addressable. In this case, they had 7 hydrogen atoms in some glycerol type molecule. Ofcourse, this makes scaling very difficult. In larger molecules, keeping the coherence under control becomes more and more difficult.

      Storage is however difficult (keeping a superposition of qubits coherent for humanly-observable times is almost intractable)

      Not completely true in atomic optical systems.
      There have been experiments done with a Bose Einstein condensate (by Lene Hau) and in a simple vapor cell (in a group is Kaiserlautern), where they have imprinted the phase information of a laser beam on the atoms, effectively storing the light. In the case of Hau's experiment, the light could be recovered after upto a few hundred milliseconds.

      Also, in experiments with single ions in a rf-trap, the coherence times turn out to be extremely long (only limited by the probability of the ion leaving the trap).

      Furthermore, longer storage times are not really needed. For Shor's algorithm, you don't need a quantum harddrive, you only need quantum registers . You might argue that you need a coherent database for something like a Grover search, but there are a couple of nice ideas about that as well. Using something called a pulse-shaper, you can create very short laser pulses, that consist of multiple frequency components, that have a well determined phase with respect to each other. This pulse shaper is programmed with classical data, but if you shoot the pulses on a molecule, you can populate many excited states coherently, thus initializing you quantum registers. Grover searching have been performed in experiments in this way.

  18. Re:Here it is... by irongull · · Score: 2, Funny

    The superposition of states in a quantum system can be interpreted as multiple universes, each containing a possible outcome. I'm pretty sure that this means that every quantum computer is inherently an inter-dimensionally multiplexed beowulf cluster of itself. Until you look at it.

  19. Oooh oooh by sbszine · · Score: 2, Funny

    function getFactors( aPrime )
    {
    return [ aPrime, 1 ];
    }

    // Profit!

    --

    Vino, gyno, and techno -Bruce Sterling

  20. Re:Here it is... by The+Munger · · Score: 4, Funny

    The new cliche will be pointing out cliches. The slashdotters who involve themselves in writing cliche +5 funnies will attract another crowd who moan about cliched +5 funnies.

    Then they're be another crowd who analyse people moaning about people who write cliched +5 funnies. This mob is starting to come through.

    Then people will start a cliched response to that level in the chain, and on, and on it will go until everyone on the planet is involved in the huge chain of cliched jokes, witty responses, and critique. After that, the sheer scale will evolve its own cliched jokes and the process will become... a chain!!!

    Then ensuing feedback loop (having already swallowed all of humanity), will eventually achieve a sentience of its own (a product of the infinite monkey syndrome) and the Slashdot servers will grow legs and crawl away.

    So please everyone, keep posting your cliched jokes. And if you don't post the jokes, post replies attacking the jokes. And if you don't post attacks, post some insight on the aggresion. And if you don't do that, think of something even more original. Eventually, we will all become the creators of a new form of life after which, I for one will welcome our Slashdot serving overlord.

    --
    Refuse to make a statement in your sig!
  21. Re:How fast will they be? by freeweed · · Score: 2, Interesting

    Raw clock cycle rate has surprisingly little to do with processor speed, unless you only ever talk about a single platform. A quantum computer is so different from a modern CPU as to make the comparison nonsensical.

    It's a bit like asking "how fast would my car go if I doubled the gas tank size?"

    --
    Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
  22. IAAQCR (I Am A Quantum Computation Researcher) by bifurcation · · Score: 5, Informative
    Some very apt points, but I'd like to make a couple of corrections:
    IBM in fact has demonstrated Shor's algorithm
    I'm not certain that IBM hasn't done something similar, but I believe that the work you're referring to is an experiment at Los Alamos which used Nuclear Magnetic Resonance and lasers to manipulate nuclear spins as qubits.
    ... the "gates" are in fact carefully crafted laser pulses ...
    Again, this is true in the Los Alamose experiment, but in general, gates can take on a bunch of different forms. In an NMR system, pulsed lasers are gates; in optical systems, things beam splitters and phase shifters (and the qubits do travel between gates); in solid-state systems, different electric fields are used to manipulate states.
    --
    Recursion (n): See recursion
    1. Re:IAAQCR (I Am A Quantum Computation Researcher) by Neurotensor · · Score: 2, Informative

      Sorry but NMR uses pulsed RF, not pulsed lasers.

      And I know of at least one successful QC implementation in solid-state that uses pulsed lasers for the gates, whereas the guys trying solid-state with controlled electric fields haven't gotten very far.

  23. Re:Err, no... by Neurotensor · · Score: 2, Insightful

    Not only that but they probably aren't the first to demonstrate in a solid either.

    I worked in a lab that already did that late last year, in the Laser Physics Centre, ANU, as evidenced by a recent PhD thesis by Jevon Longdell, and many conference presentations. Although technically it was a controlled-phase gate, but they are functionally equivalent anyway.

    Unfortunately writing papers takes a back seat to doing the work, so in the wider field few people know about it. It sucks to watch it happen.

  24. If you can do quantum computing ... by vlad_petric · · Score: 4, Informative
    Then you can probably do quantum cryptography as well. Quantum cryptography has the nice property that an evesdropper cannot intercept the message without destroying it.

    Anyway, RSA can be broken by factorization. Diffie-Hellman however requires the inversion of the discrete exponential function. While quantum computing can factorize in P-time, it cannot inverse an arbitrary function in a reasonable amount of time. It can do it more efficiently than a normal computer (2^(k/2) time as opposed to 2^k with Lov Grover's search algorithm, where k is the number of bits), but it's still exponential.

    In any case, I wouldn't worry yet ... Shor's algorithm, for 512 bits, requires in the order of tens of thousands qubits (with realistic quantum error correction). So far the highest number of qubits that were put together is around 10.

    --

    The Raven

    1. Re:If you can do quantum computing ... by Rich0 · · Score: 2, Informative

      Then you can probably do quantum cryptography as well. Quantum cryptography has the nice property that an evesdropper cannot intercept the message without destroying it.

      As others have pointed out, these are two different problems. We can do Quantum cryptography TODAY. We can do it about as cheaply now as we will 100 years from now. The most expensive part of the process is running a fiber optic cable directly between the sender and receiver. Somehow I don't see that happening on the battlefield...

      Unless you want to have trusted relays handling your message (which could break your quantum message) you need a direct network - all nodes must be directly wired to every other node, with significant distance limitations.

      Quantum cryptography will always be a bit of a niche area, unless we move into space where we can get reasonable performance over moderate distances using lasers. That probably wouldn't work in an atmosphere.

    2. Re:If you can do quantum computing ... by Anonymous Coward · · Score: 3, Informative

      Diffie-Hellman however requires the inversion of the discrete exponential function.

      Which you can also solve very well on a QC. Schor also proposed a (less famous) algorithm for this, or more exactly, for computing the discrete logarithm (which is a sufficent condition to break diffie hellman, but which is not even proven to be necessary...). Actually it was in the same paper.

      So you do not need to use grover to speed up brute force. Even on a classical setting there are better ways to compute discrete logarithms than just doing brute force (let's it's smart brute force).For instance baby-step giant-step achieves the square root, but there are better ways (but you need some algebra :))

  25. All the awesome power -- by Chromodromic · · Score: 2, Funny

    -- And Emacs will still be slower than Vim.

    --
    Chr0m0Dr0m!C
  26. Re:/.'ed? No worries: by Scarblac · · Score: 2, Informative

    Just reading in the number and printing it is O(n), unfortunately (takes time proportional to the number of characters of the input).

    --
    I believe posters are recognized by their sig. So I made one.
  27. ETA by Jace+of+Fuse! · · Score: 2, Funny

    ETA for the first quantum computers: 10 to 100 years.

    10 to 100, is it? I guess since we're talking about Quantum, we'll take this a step further and say "They may or may not actually release a computer."

    Or is it that they will AND they won't?

    --

    "Everything you know is wrong. (And stupid.)"

    Moderation Totals: Wrong=2, Stupid=3, Total=5.
  28. The Details by TheSync · · Score: 2, Insightful

    The interesting thing about this method is that it is solid-state rather than some concoction of lasers and ultra-cold gasses.

    Demonstration of conditional gate operation using superconducting charge qubits

    T. YAMAMOTO1,2, YU. A. PASHKIN2,*, O. ASTAFIEV2, Y. NAKAMURA1,2 & J. S. TSAI1,2

    1 NEC Fundamental Research Laboratories, Tsukuba, Ibaraki 305-8501, Japan
    2 The Institute of Physical and Chemical Research (RIKEN), Wako, Saitama 351-0198, Japan
    * Permanent address: Lebedev Physical Institute, Moscow 117924, Russia

    Correspondence and requests for materials should be addressed to T.Y. (yamamoto@frl.cl.nec.co.jp).

    Following the demonstration of coherent control of the quantum state of a superconducting charge qubit, a variety of qubits based on Josephson junctions have been implemented. Although such solid-state devices are not currently as advanced as microscopic qubits based on nuclear magnetic resonance and ion trap technologies, the potential scalability of the former systems--together with progress in their coherence times and read-out schemes--makes them strong candidates for the building block of a quantum computer. Recently, coherent oscillations and microwave spectroscopy of capacitively coupled superconducting qubits have been reported; the next challenging step towards quantum computation is the realization of logic gates. Here we demonstrate conditional gate operation using a pair of coupled superconducting charge qubits. Using a pulse technique, we prepare different input states and show that their amplitude can be transformed by controlled-NOT (C-NOT) gate operation, although the phase evolution during the gate operation remains to be clarified...

  29. Not the first by Anonymous Coward · · Score: 3, Interesting

    This is not the first controlled not gate. Controlled not operations have been implemented in quantum optical systems for a few years now. The problem with quantum optics is that you cannot make the systems with lithography.

    As they say in the article, it is the first controlled not quantum gate in a solid state device.
    It is very important to make that distinction, since quantum optical systems have much less decoherence then solid state devices, which makes them a better candidate from a fundamental point of view. Combining that with the electronic-optical hybrid chip that was discussed in a posting here a few days ago, I think that you cannot rule out the possibility that quantum computers will be implemented in such hybrid systems as well.

  30. Security Implications by eddeye · · Score: 2, Informative
    I'm currently taking a grad class on quantum computing at UC Davis. The technology is unbelievably fragile right now. There are huge hurdles to overcome before a non-trivial quantum computer is built. The security ramifications are blown way out of proportion. Consider:
    • Current architectures don't scale past about 7 qubits, which is barely enough to factor the number 15. Part of the problem is letting all the qubits in the system interact with each other. It's not even certain that a scaleable architecture can be developed.
    • The quantum state of the machines decays very quickly, requiring a lot of error corrections for sustainable calculations. It's not a given yet whether such architectures are possible.
    • Shor's algorithm is algorithmically faster than classical sieve methods for factoring numbers. However the constants involved are huge. No one knows where the curves cross yet (mainly because no one's built a large enough quantum computer to extrapolate from yet). It may require impossibly large numbers to benefit from Shor's speed advantage. I.e if Shor's is only faster than sieves on composites of 50,000+ bits, asymmetric crypto is safe.
    • Symmetric crypto will barely notice when/if quantum computers appear. Grover's may be able to effectively halve the key size for brute-force searches, but it's gonna be much, much slower than a classical computer on that reduced size. A 256-bit key would be at least as immune to brute-force from quantum computers as a 128-bit key is to conventional machines.
    • Quantum cryptography is a misnomer for the BB84 and BB92 protocols. These should be called quantum key distribution because that's all they do. You can't encrypt information with them, just exchange keys. You still need conventional crypto to use the keys with.
    • There are indications that the quantum world might provide equivalents to digital signatures and possibly other asymmetric crypto primitives. However like quantum key distribution it requires a dedicated quantum channel (e.g. a single fiber optic cable) between the two parties. It's gonna be expensive to setup.
    Basically, quantum computers and quantum cryptography will have little effect on the security world. Quantum crypto is only useful in ultra-paranoid, damn-the-expense applications (military, govt). Worse case scenario, the rest of the world has to give up asymmetric crypto and fall back on symmetric methods. Some infrastructure gets replaced and life goes on.

    I don't expect to see non-trivial quantum computers in the research lab for a minimum of 3 decades, though the professor sees them in 1.

    --
    Democracy is two wolves and a sheep voting on lunch.
  31. Re:So, um? by vidarh · · Score: 2, Insightful
    I think you need to read up on what quantum computing means. You seem to have some twisted idea of quantum computers disturbing space time or something, which has nothing to do with reality.

    Quantum computers are interesting because they can carry out operations massively parallel by exploiting quantum states instead of by duplicating processing units. It's important to realise that this is a limiting factor of a quantum computer: It WILL NOT speed up problems that can't be restated to take advantage of the parallelism that a quantum computer offers.

    The most likely use of quantum computers for the foreseeable future would be as simple co-processors for a conventional computer, with just a small number of qubits, as there are many smaller tasks that could likely be speeded up dramatically. Imagine doing string searches and comparisons where every character is compared against the pattern at once for instance - would have a dramatic impact on query times for databases and full text search systems... Systems depending on large amounts of matrix calculations would be another.

    Applying quantum computing in piecemeal for algorithms that are small, self contained and frequently used will be immensely beneficial long before software engineers catch up and get experience with developing algorithms for quantum computers.

    Disclaimer: I haven't spent much time reading up on quantum computers, so I'm likely completely clueless about the subject :-)

  32. "That's why OTP is unpractical"... Blehh by da5idnetlimit.com · · Score: 2, Insightful

    "Unless you have someone on a gray coat to take a bible inside a black suitcase chained to his arm to the recipient of your message."

    As a matter of fact, I can, without problem, get a Multi Megabyte Key, available worldwide, without anyone the wiser...

    It's called "Project Gutemberg", for one, or any place you can DL fixed texts,software or anything you like (say, what about usinf MS SP4 update as a key? it's available, and makes a key about 200Mo...)

    OTP is real, works nice and is easily implementable. Internet got us here 8)

    So, my DSL modem is black, and has a grey cat5 cable connected to it. I think I'll use it as my courrier 8)

    --
    It takes 40+ muscles to frown, but only four to extend your arm and bitchslap the motherfucker
    1. Re:"That's why OTP is unpractical"... Blehh by Rich0 · · Score: 2, Insightful

      Bad idea...

      The NSA would say, gee, there is no way to tell which of these 100 million keys that generate valid english messages are real, but one has a surprising similarity to War and Peace. Wonder which one is the real one?

      The whole point in using a RANDOM key is that nobody knows when they've found the right one. If your key is as ordered as your message then it will be VERY obvious. What are the chances that two different novels when applied to the same ciphertext would yield two different valid english messages?

  33. Re:Bugs, who need them? by Ben+Hutchings · · Score: 2, Insightful

    Just because it's hard to find an answer, doesn't mean it's hard to verify it. Consider the canonical example of factorisation - checking the results is trivial.

  34. Yeah, but besides encryption? by osgeek · · Score: 2, Insightful

    What good is a quantum computer for besides breaking encryption? It seems like that's the only problem-solving ability of quantum computers that is ever mentioned.

  35. The downsides of quantum computing. by Vilim · · Score: 2, Informative

    It seems to me that quantum computing will mean the end of privacy for consumers like you and me. Currently I can use a 4096 bit PGP key to encrypt something so that pretty well noone on earth, even those with the most massive supercomputers, will be able to see my secret message. Once quantum computing comes out this goes down the drain. If my 4096 bit key can be cracked in a few hours then I need to get a bigger key. Unfortunately at first these quantum computers will be reserved for governments only, for many people who use encryption that is exactly the type of people that they don't want spying on them (government conspirists). In order to match the raw computing speed of the governements massive quantum computer my athlon tbird 1400 may have to generate a 4294967296 bit key. A feat which may take days, even worse when this key is used for encryption. Personal privacy worked when computers merely scaled linearly (if you double the computing power , you basically double the processing power) but with the advant of quantum computers those rules just don't apply any more

    --
    History will be kind to me, for I intend to write it - Sir Winston Churchill
  36. No by pmc · · Score: 4, Informative

    You may be thinking of Polish Military Intelligence, but they did not "break" Enigma as such. They managed to break an Enigma system - the combination of machine and method of operation - which was to modern eyes fairly weak. Just before the invasion of Poland in 1939 the Germans changed they system and the Poles could not read it anymore (not because they couldn't figure it out, but that the methods used to crack it were too slow - they couldn't build the bombes which were an essential part of the cracking).

    The most significant thing they did was to workout the wiring of the Enigma machine itself. There are 26! ways to wire the machine, and one of the Polish mathematicians - Marian Rejewski - in a stroke of genius - managed to work this out.

    The British Intelligence built on the work of the Poles at Bletchly Park duing WW2. Turing in particular produced what was called "The Prof's Book" which was a systematic method for breaking Enigma regardless of the system being used with it. Note that the cracking couldn't be done cold - in particular the woring of the rotors in the enigma machines were required (as well as the wiring of the machine itself - although oddly this was never changed).

    What both the Poles and the Allies realised was that Enigma had a huge weakness - it could never encipher a character as itself. The German's knew about this, but thought it was just a quirk.

    Later on Shark appeared. This was a cypher system similar to Enigma except it worked on teletype messages. To break this Colossus was born, but the same general idea worked. Ironically, although this was the first Turing machine*, Turing actually had very little directly to do with it.

    Thus ends the "Miniature Guide to Codebreaking in Europe in WW2"

    * Actually, the German Z3 was the first Turing machine, in 1941. This is not the usual case of "to the victor the spoils" as nobody was sure that the Z3 was a Turing machine until about 1990, althought Conrad Zuse, its designer, thought it might be. I've always vaguely wondered if, by using the same tricks, you could get the difference engine to become a Turing machine.

  37. Quantum gates by RayBender · · Score: 2, Funny

    I thought it had been shown that to make a quantum computer you needed the gates to be made of cats...

    --
    Human genome = 3 billion base pairs = 6 GBit. Windows + Office = 20 Gbit. Which is more impressive?
  38. First CNOT in solid state, not first CNOT by dabacon · · Score: 2, Informative

    This is not the first controlled-not gate for a quantum computing system but rather the first in this solid state system.

    Other implementations of a controlled-not gate (or its close relative, a controlled-phase gate) include:

    Caltech Quantum Optics implemented a controlled-phase gate between photons using a strongly coupled atom in a cavity.

    Serge Haroche's group implemented a controlled-phase between an atom and a photon using microwave cavities and atomic Rydberg states.

    NIST Ion Storage Group: implemented a two qubit gate (which could be turned into a controlled-not) and a four qubit gate using trapped ions.

    NMR quantum computing has been implemented by various groups including the biggest quantum computation to date, factoring 15, done by Isaac Chuang's group (IBM and now MIT.)

    A proof of principle implementation of a controlled-not in the linear optics quantum computing scheme has been implemented at the University of Queensland.

    I'm leaving out quite a few other cool experiments: but the above links should give you a good idea of the what early steps have been taken in quantum computing.

  39. At the risk of sounding US-centric... by KC7GR · · Score: 2, Insightful

    I find it significant (and maybe a little alarming as well) that it was Japan, and not the U.S., who made this apparent breakthrough. To my eyes, although I would say "Congrats!" to the Japanese, it makes a pretty sad statement about how our own industrial base (read: large companies) values (or doesn't) heavy R&D and engineering.

    How much engineering and R&D has been "outsourced" or "downsized" in the past two decades, in favor of delivering short-term "Shareholder Value?"

    What happened to long-term survival and growth of a company vs. short-term profits? Just as two examples, Bell Labs is a pale shadow of what they once were, as is Boeing. How much further is it going to go before the U.S. is merely a mass "user" of the products that our "global partners" think up and turn out?

    --

    Bruce Lane, KC7GR,

    Blue Feather Technologies

  40. The biggest application: evolutionary computing by Squidbait · · Score: 2, Insightful

    Picture these staggering fast processing speeds applied to genetic algorithms/programming. For those who don't know, in a very rough sense (don't nitpick) this involves:

    1. You want a program that take input X and produces output Y

    2. Generate a whole bunch of random programs. Most will do nothing even resembling producing the output Y, but some will suck more than others.

    3. Feed the input X, and see what output each program produces. Take the least terrible program from the batch, make a bunch of copies

    4. Then for each copy, change it randomly a little, eg flip a few bits.

    5. If there isn't any program in the bunch that's good enough for you, go back to 3.

    6. Otherwise, you have your program and didn't have to write it yourself. In fact, you don't even need to have the slightest idea how to solve the problem, just how to state it.

    The only problem with this is that it may take a really, really long time to evolve an acceptable program. Often too long to be worth bothering. But with speeds as ridiculous as they propose for quantum computers, what program couldn't you evolve in say, a day? Or, for that matter, why not just generate every possible piece of machine code of a given length, run them all through an emulator at sickening speeds, and see if any of them solved the problem? I think that if you have truly sick processing power like this, then almost any problem is solvable with relative ease. Maybe I overstate the case, but you see what I'm getting at.