We develop a high-performance tensor-based simulator for random quantum circuits(RQCs) on the new Sunway supercomputer. Our major innovations include: (1) a near-optimal slicing scheme, and a path-optimization strategy that considers both complexity and compute density; (2) a three-level parallelization scheme that scales to about 42 million cores; (3) a fused permutation and multiplication design that improves the compute efficiency for a wide range of tensor contraction scenarios; and (4) a mixed-precision scheme to further improve the performance. Our simulator effectively expands the scope of simulatable RQCs to include the 10X10(qubits)X(1+40+1)(depth) circuit, with a sustained performance of 1.2 Eflops (single-precision), or 4.4 Eflops (mixed-precision)as a new milestone for classical simulation of quantum circuits; and reduces the simulation sampling time of Google Sycamore to 304 seconds, from the previously claimed 10,000 years.

ABSTRACT The security of many cryptographic systems is based on the difficulty of solving systems of quadratic multivariate polynomial equations. XL family (which stands for eXtended Linearization) is a traditional type of algorithm for solving systems of multivariate polynomial equations over finite fields. The main idea of these algorithms is to extend the initial system by monomials multiplications and use linear algebra techniques to solve the system. The overall complexity of XL family is essentially determined by the workload of Gaussian elimination step. In this paper, we use the structured Gaussian elimination and parallel fast Gaussian elimination to reduce the complexity of XL family over GF(2). Because of the sparsity of the extended system, structured Gaussian elimination is applied to reduce the dimensions of the extended system. Thus, a great reduction of the storage can be obtained. By slightly modifying the logic of ordinarily Gaussian elimination, we parallelly compute the reduced system. Theory analysis indicates that the complexity of our improved XL, XL_SP, is (λT)2, which is far lower than (7/64)T2.8, the complexity of XL, whereTis the number of monomials andλis the ratio of the dimensions of the reduced system to the extended system. Further experiments to Hidden Field Equation cryptosystems show that about 90% reduction of the extended system is achieved by using structured Gaussian elimination, which meansλis about 1/10 in our experiments. Copyright © 2013 John Wiley & Sons, Ltd.