How Claude Rewrote Modular Inversion and Quantum Decoding

Claude Mythos 5's headline elliptic-curve result rests on a specific mathematical trick. In reversible "divsteps" modular inversion, a quantum circuit normally has to store the sign and branch decision made at every arithmetic step, which eats up qubits. Claude found a mathematical invariant that lets those branch decisions be recovered after the fact from the updated arithmetic registers instead of being stored separately, removing the need for dedicated bookkeeping qubits. The resulting design uses about 12% more qubits than the best previous construction but cuts the gate count to roughly one-seventeenth [2]. Claude went further than a typical circuit paper would and formally proved the correctness of this arithmetic invariant in the Lean theorem prover, rather than relying only on spot-checks [2].
A second result followed a different path. For a Reed-Solomon decoder circuit used in a scheme called Decoded Quantum Interferometry, Claude swapped the standard decoding approach for Berlekamp-Massey decoding and built a custom simulator to size the circuit's memory precisely instead of over-provisioning qubits defensively. That swap cut the Toffoli gate count roughly 12x against Google Quantum AI's prior construction, from about 5.1 million gates down to about 440,000, while also trimming peak qubit use from 1,938 to 1,837 [3]. Anthropic separately reports that the storage optimization alone cut qubits needed for stored records from 840 down to 19 [1].



