TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Grover's algorithm offers no quantum advantage

52 点作者 GavCo大约 2 年前

7 条评论

amluto大约 2 年前
Sigh, this paper is extremely misguided. It gets two things egregiously wrong (not in the sense of a math error, although the math is barely worth reading), but in the sense of fundamentally misunderstanding what it&#x27;s talking about.<p>1. A quantum computer is not a magic exponentially parallel computer. There&#x27;s a fairly common misunderstanding of quantum computers that goes like this: a quantum state is a superposition of classical states. So a classical number with n bits of RAM is in one of 2^n states, but a quantum computer is in <i>all of them at once</i>, with an &quot;amplitude&quot; that takes the form of a complex number associated with each state. And you can compute things exponentially faster because you can compute with this whole 2^n-element vector at once!<p>This is just a tiny bit true (you can, in fact, write the state of a quantum computer like that), but quantum computers do discrete operations, you can&#x27;t read the vector directly and, in general, you can&#x27;t actually get this magic factor-of-2^n speedup naively, nor can you get any speedup at all unless you are doing something clever.<p>But, for some reason, this paper buys into this myth with its quantum-inspired classical algorithm. It&#x27;s magic! You compute the Grover oracle and get:<p>|s&gt; - sum over all n-bit &quot;winner&quot; strings w_i (|w_i&gt;)<p>And the form of that expression barely matters, nor does whether I transcribed it right or whether you read it right. Because, if you can literally just look at the coefficients (of which there are 2^n!), you can easily find all the &quot;winners&quot;. And that would take, shocker, 2^n guesses on a regular computer, or O(2^(n&#x2F;2)) on a quantum computer with Grover&#x27;s algorithm. So they&#x27;ve invented a really stunningly bad way to implement brute-force search on a classical computer using fancy math, and you would do much better trying to solve SAT by simply checking each possible input one-by-one. News at 11.<p>2. They have entirely missed the point of quantum error correction. Here&#x27;s the classical analogue, as observed by John von Neumann in 1956 [0]: if you build a computer (or a brain!) out of unreliable components, then, as you do a longer an longer computation, the chance that you get the right answer seems like it would decay exponentially or worse. But our brains work pretty well and computers work pretty well! von Neumann proved that it is possible to design an computer out of unreliable parts that is nonetheless reliable by inserting error correction steps regularly in a carefully arranged way. (Of course, modern semiconductor technology is so amazingly good that you can get quite far with no error correction. Although we&#x27;re at the point that you need ECC RAM for really good results.) What you <i>cannot</i> do is run a computer that screws up each gate with, say, probability 0.001%, carelessly run a calculation of any appreciable length, and expect any reasonable chance of getting the right answer.<p>Again, news at 11 -- this stuff has been known since at least the 1950s.<p>In quantum computing, the situation is exactly the same, except the numbers are worse and the error correction is a lot harder. No one expects quantum gates to ever be nearly as good as a CMOS gate. Nonetheless, Peter Shor and others proved the threshold theorem [1], which shows that you can take a quantum circuit and implement it (with more memory and more gates!) in a way that increases complexity only by a polynomial factor and gets the right answer arbitrarily close to 100% of the time. This is really cool! But you have to error correct your memory, and you have to error correct the calculation as you do it.<p>So this paper somehow missed the entire point, computes the degree to which the algorithm is sensitive to noise if you run the whole thing without error correction, determines that the output is not even close to correct, and gives up. No kidding! The fact that this doesn&#x27;t work has been known for about as long as anyone has been thinking about quantum computers at all. It would be like running a year-long calculation without ECC memory and expecting that you can make up for the lack of ECC memory by simply repeating the calculation until you get lucky and get no errors. Nope, doesn&#x27;t work.<p>edit: Huh, Appendix C of this paper acknowledges the existence of something vaguely resembling the threshold theorem, and then proceeds to do a calculation showing that a particular (asymptotically suboptimal) construction isn&#x27;t good enough to make Grover&#x27;s algorithm useful. I&#x27;m not impressed. Maybe paper&#x27;s title should be changed: &quot;A badly implemented quantum algorithm may not outperform an totally ridiculous classical algorithm, but we didn&#x27;t bother to analyze the classical algorithm very well and we are merely hypothesizing that there exist problems for which it&#x27;s better than exhaustive search.&quot;<p>[0] <a href="https:&#x2F;&#x2F;www.degruyter.com&#x2F;document&#x2F;doi&#x2F;10.1515&#x2F;9781400882618-003&#x2F;html" rel="nofollow">https:&#x2F;&#x2F;www.degruyter.com&#x2F;document&#x2F;doi&#x2F;10.1515&#x2F;9781400882618...</a><p>[1] <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Threshold_theorem" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Threshold_theorem</a>
评论 #35253010 未加载
评论 #35253005 未加载
评论 #35270098 未加载
评论 #35253111 未加载
评论 #35253508 未加载
OscarCunningham大约 2 年前
There are some word games going on here. They propose a classical algorithm that uses the oracle exponentially fewer times than Grover&#x27;s algorithm. But they&#x27;re using a special definition of what it means for a classical algorithm to use a quantum oracle, meaning that each classical &#x27;use&#x27; can take exponentially longer than a quantum computer using the oracle.<p>The net result is that for the worst case of oracles, Grover&#x27;s algorithm is still faster than a classical computer.
评论 #35253230 未加载
pyentropy大约 2 年前
I don&#x27;t want to read the whole thing because it looks like it&#x27;s very cynical - it judges TCS scientists who believe in Grover speedup as naive because they are unaware of real life noise, without actually realizing that&#x27;s <i>the point</i> of TCS.<p>We don&#x27;t know how noise will scale IRL so the job of theoretical scientists is to design the basic units of quantum computation regardless of how it may or may not work IRL. It&#x27;s like judging XOR and NAND in 1920s because transistors maybe won&#x27;t be able to simulate them.
mparlane大约 2 年前
Does this finding affect Shor&#x27;s Algorithm which I only learnt about last night from Veritasium ?
评论 #35252506 未加载
评论 #35252471 未加载
评论 #35252993 未加载
Atlas22大约 2 年前
Is this purely a preprint or has it passed a peer review?
da-bacon大约 2 年前
For why you should basically ignore this paper because it is &quot;both novel and correct, but not in the same places&quot; see Scott&#x27;s writeup <a href="https:&#x2F;&#x2F;scottaaronson.blog&#x2F;?p=7143" rel="nofollow">https:&#x2F;&#x2F;scottaaronson.blog&#x2F;?p=7143</a>
评论 #35330040 未加载
jnwatson大约 2 年前
This means that symmetric cryptography is safe from quantum computing.<p>Before, folks were saying we had to double the key length.
评论 #35252214 未加载
评论 #35252469 未加载
评论 #35252249 未加载
评论 #35252495 未加载
评论 #35259643 未加载