Quantum Computing since Democritus

by Scott Aaronson

Classically, however, the best-known factoring algorithm is the Number Field Sieve, which takes about