Total Physical Qubits
1,945,600
Wall-Clock Runtime
8.2 Hours
Logical Qubit Count
3,840
Toffoli / CCZ Volume
4.5 × 10⁸
Fault-Tolerant Surface Code Spatial Floorplan
Data Patches
Magic Distillation
Braiding Track
Dirty Ancillae
|0⟩ ---[ H ]---•--------•------------------[ QFT† ]---> Measurement
| |
|1⟩ -----------[ ×a²⁰⁴⁷ ]-[ ×a²⁰⁴⁶ ]...---[ ×a⁰ ]-----> Target Register
| |
|A⟩ ---[Catalytic Carry Chain Adder (Gidney-Ekerå)]----> Clean Ancilla Recycled
Arithmetic Subroutine
Windowed addition with 2-bit catalytic tables
T-depth per modular adder reduced from O(n²) to O(n)
Distillation Pipe Topology
15-to-1 Two-Level Distillation (CCZ output)
Target error per magic state: < 10⁻¹²
How Craig Gidney collapsed factoring from millennia to 8 hours:
1. Measurement-Based Uncomputation: Instead of applying inverse quantum circuits to clear scratch registers, Gidney measures qubits directly and corrects phases classically.
2. Catalytic Space-Efficient Adders: Utilizes loaded register states as catalysts, recycling 'dirty' qubits without entangling them permanent state.
3. Direct CCZ State Distillation: Distills complex 3-qubit Toffoli/CCZ states directly rather than assembling them from individual T gates.
1. Measurement-Based Uncomputation: Instead of applying inverse quantum circuits to clear scratch registers, Gidney measures qubits directly and corrects phases classically.
2. Catalytic Space-Efficient Adders: Utilizes loaded register states as catalysts, recycling 'dirty' qubits without entangling them permanent state.
3. Direct CCZ State Distillation: Distills complex 3-qubit Toffoli/CCZ states directly rather than assembling them from individual T gates.
Cryptographic Threat Horizon:
• RSA-2048: ~20M physical qubits (or ~2M in optimistic 10⁻⁴ regime) breaks standard internet TLS within hours.
• ECDSA P-256 (ECC): Substantially smaller key (256-bit) requires only ~0.5M physical qubits and ~1.5 hours to compute discrete logarithms.
• Remediation: Fast-track NIST Post-Quantum Cryptography (ML-KEM, ML-DSA).
• RSA-2048: ~20M physical qubits (or ~2M in optimistic 10⁻⁴ regime) breaks standard internet TLS within hours.
• ECDSA P-256 (ECC): Substantially smaller key (256-bit) requires only ~0.5M physical qubits and ~1.5 hours to compute discrete logarithms.
• Remediation: Fast-track NIST Post-Quantum Cryptography (ML-KEM, ML-DSA).