vec y_i\rangle = 0 \textrm{ for all } i \}$.

For a Boolean function $f: \F_2^n \rightarrow \F_2^n$ we denote its [*universal (quantum) embedding*]{} by $$U_f: \F_2^{2n} \rightarrow \F_2^{2n} \textrm{ with } (\vec x, \vec y) \mapsto (\vec x, f(\vec x)+\vec y).$$ Notice that $U_f(U_f(\vec x,\vec y)) = (\vec x, \vec y)$.

Let $\ket{x} \in \mathbb{C}^2$ with $x \in \F_2$ be a qubit. We denote by $H$ the [*Hadamard function*]{} $$x \mapsto \frac 1 {\sqrt 2} (\ket{0} + (-1)^x \ket{1}).$$ We briefly write $H_n$ for the $n$-fold tensor product $H \otimes \ldots \otimes H$. Let $\ket{x}\ket{y}\in \mathbb{C}^4$ be a $2$-qubit system. The $\cnot$ (controlled **not**) function is the universal embedding of the identity function, i.e. $\ket{x}\ket{y} \mapsto \ket{x}\ket{x+y}$. We call the first qubit $\ket{x}$ [*control bit*]{}, since we perform a **not** on $\ket{y}$ iff $x=1$.

A [*Simon function*]{} is a periodic $(2:1)$-Boolean function defined as follows.

\[def:simon\] Let $f:\F_2^n\to \F_2^n$. We call $f$ a [*Simon function*]{} if there exists some period $\vec s \in \F_2^n \setminus\Zero$ such that for all $\vec x, \vec y \in \F_2^n$ we have $$f( \vec x) = f( \vec y) \Leftrightarrow \vec y = \vec x + \vec s.$$ In [*Simon’s problem*]{} we have to find $\vec s$ given oracle access to $f$.

In order to solve Simon’s problem classically, we have to find some collision $\vec x \not= \vec y$ satisfying $
vec y_i\rangle = 0 \textrm { for all } i \}$. 

 For a Boolean function $ f: \F_2^n \rightarrow \F_2^n$ we denote its [ * universal (quantum) embedding * ] { } by $ $ U_f: \F_2^{2n } \rightarrow \F_2^{2n } \textrm { with } (\vec x, \vec y) \mapsto (\vec x, f(\vec x)+\vec y).$$ detect that $ U_f(U_f(\vec x,\vec y) ) = (\vec x, \vec y)$. 

 lease $ \ket{x } \in \mathbb{C}^2 $ with $ x \in \F_2 $ be a qubit. We denote by $ H$ the [ * Hadamard function * ] { } $ $ x \mapsto \frac 1 { \sqrt 2 } (\ket{0 } + (-1)^x \ket{1}).$$ We briefly compose $ H_n$ for the $ n$-fold tensor product $ H \otimes \ldots \otimes H$. Let $ \ket{x}\ket{y}\in \mathbb{C}^4 $ be a $ 2$-qubit organization. The $ \cnot$ (manipulate * * not * *) function is the cosmopolitan embedding of the identity affair, i.e. $ \ket{x}\ket{y } \mapsto \ket{x}\ket{x+y}$. We call the beginning qubit $ \ket{x}$ [ * control bit * ] { }, since we do a * * not * * on $ \ket{y}$ iff $ x=1$. 

 A [ * Simon function * ] { } is a periodic $ (2:1)$-Boolean function defined as follows. 

 \[def: simon\ ] Let $ f:\F_2^n\to \F_2^n$. We call $ f$ a [ * Simon function * ] { } if there exist some period $ \vec s \in \F_2^n \setminus\Zero$ such that for all $ \vec x, \vec y \in \F_2^n$ we have $ $ f (\vec x) = f (\vec y) \Leftrightarrow \vec y = \vec x + \vec s.$$ In [ * Simon ’s trouble * ] { } we have to find $ \vec s$ given prophet access to $ f$. 

 In ordering to solve Simon ’s problem classically, we have to find some collision $ \vec x \not= \vec y$ satisfying $
vec y_i\rangle = 0 \textrm{ for aul } i \}$.

For a Boolean fuiction $r: \F_2^n \rigftarrow \F_2^n$ we denote its [*unitersql (quqntum) embedding*]{} by $$U_f: \W_2^{2n} \rightagrow \F_2^{2n} \twxtrn{ with } (\vec x, \vec y) \mapstk (\vec e, f(\vec x)+\vec y).$$ Nptice that $U_f(U_f(\vec x,\vec f)) = (\vzc x, \vec y)$.

Let $\ket{x} \in \mathbb{C}^2$ with $x \in \F_2$ br w qubit. We denjte nr $H$ fhe [*Hadamard function*]{} $$x \mapsto \frad 1 {\sqrt 2} (\ket{0} + (-1)^x \ket{1}).$$ Ee briefly write $H_n$ for thf $n$-flld tensor product $H \otimes \leots \itimes H$. Let $\ket{x}\ket{y}\in \mathbb{C}^4$ be a $2$-qubit system. The $\cnot$ (controuled **uot**) functiob us hve universao embvdding of the identitf functoon, i.e. $\ket{x}\ket{n} \mapvto \ket{x}\ket{x+y}$. We call thx first qubit $\ket{x}$ [*cjntrol bid*]{}, aince we perform q **bot** ot $\ked{y}$ iwd $x=1$.

X [*Sjmpn functlon*]{} is a perikdic $(2:1)$-Booleab function defined ss dollows.

\[def:simkn\] Let $f:\S_2^n\to \F_2^n$. We call $f$ a [*Simon function*]{} if tvers exists some period $\vex s \in \F_2^n \setminus\Zerl$ such thwt for all $\vec x, \vec y \in \F_2^n$ we have $$f( \vec x) = f( \vac y) \Mdftxlnhtafeoa \vec y = \vec x + \vec s.$$ In [*Simon’s problem*]{} we hads uo nind $\vec s$ given oracle accrsd yj $f$.

In order tu solvz Sjmon’s problem clasdically, we hqve to figd spme collision $\vec x \not= \vec y$ satisfyiny $
vec y_i\rangle = 0 \textrm{ for all \}$. a Boolean $f: \F_2^n \rightarrow (quantum) by $$U_f: \F_2^{2n} \F_2^{2n} \textrm{ with (\vec x, \vec y) \mapsto (\vec f(\vec x)+\vec y).$$ Notice that $U_f(U_f(\vec x,\vec y)) = (\vec x, \vec y)$. $\ket{x} \in \mathbb{C}^2$ with $x \in \F_2$ be a qubit. We denote by the function*]{} \mapsto 1 {\sqrt 2} (\ket{0} + (-1)^x \ket{1}).$$ We briefly write $H_n$ for the $n$-fold tensor product \otimes \ldots \otimes H$. Let $\ket{x}\ket{y}\in \mathbb{C}^4$ be $2$-qubit system. The $\cnot$ **not**) function is the universal of identity function, $\ket{x}\ket{y} \ket{x}\ket{x+y}$. call the first $\ket{x}$ [*control bit*]{}, since we perform a **not** on $\ket{y}$ iff $x=1$. A [*Simon function*]{} is a $(2:1)$-Boolean function follows. \[def:simon\] $f:\F_2^n\to We $f$ a [*Simon there exists some period $\vec s such that for all $\vec x, \vec y \F_2^n$ we $$f( \vec x) = f( \vec \Leftrightarrow \vec y = \vec x + \vec In [*Simon’s problem*]{} we have to find $\vec s$ given oracle access to $f$. In solve Simon’s problem classically, have to find collision x \vec satisfying $
vec y_i\rangle = 0 \textrm{ for all } i \}$.

FOr a Boolean FunctIon $F: \F_2^n \RiGhtaRrow \f_2^n$ we denote its [*uNIverSal (quantum) embedding*]{} by $$U_F: \F_2^{2n} \riGhTArroW \f_2^{2n} \TextrM{ with } (\veC X, \vEC Y) \maPsTo (\Vec X, f(\VEc X)+\vec y).$$ notIce that $u_f(U_f(\vec x,\veC y)) = (\vEc X, \vec y)$.

Let $\ket{x} \IN \mAthbb{C}^2$ with $X \in \f_2$ be a qubit. We dEnoTe by $H$ tHe [*hadAMard fUncTion*]{} $$x \Mapsto \FRac 1 {\sqrT 2} (\ket{0} + (-1)^x \ket{1}).$$ WE bRIefly wRIte $H_n$ foR THe $N$-folD tensor product $H \otIMeS \Ldots \otimes H$. LeT $\ket{x}\kEt{Y}\In \MAThbB{C}^4$ bE a $2$-qubit sysTeM. The $\cNOt$ (contrOLlED **NOt**) fUNction is the unIversal embeDDinG of the IdEntITy funcTion, i.E. $\kET{x}\kEt{y} \mapsto \keT{x}\keT{x+y}$. We call The firST qubit $\kET{x}$ [*contrOl bit*]{}, sIncE we PerfORm A **nOt** oN $\kET{y}$ iFF $x=1$.

a [*SiMOn fUnction*]{} iS a PeRiodiC $(2:1)$-BooLEAN FuncTioN defIned aS follows.

\[def:siMon\] let $f:\f_2^N\to \f_2^n$. We cAll $f$ a [*simoN fUnctiOn*]{} if thEre exIsTs some period $\vec S \in \F_2^N \setminus\zerO$ sUch ThAt for ALl $\vec x, \Vec Y \in \f_2^n$ we havE $$f( \vec x) = f( \VEc y) \leFTRIgHtarrow \vec y = \vec x + \vec S.$$ IN [*sImOn’s problEm*]{} we haVE tO fINd $\vec s$ giVeN orAcle ACCess tO $f$.

In ORdEr to solvE Simon’S PrObLem clasSiCally, wE hAve To fInd soME colLision $\Vec x \not= \vEc y$ saTIsfying $
vec y_i\rangle = 0 \textrm { for all} i \ }$. 

F or  a B oole an function $f :  \F_ 2^n \rightarrow \F_2^n $ wede n otei ts  [*un iversal (q u a ntu m)  e mbe dd i ng *]{}by$$U_f:\F_2^{2n}\ri gh tarrow \F_2^ { 2n } \textrm{  wi th } (\vec x , \ vec y)  \ map s to (\ vec  x, f (\vecx )+\vec  y).$$ No ti c e that $U_f(U_ f ( \v ec x ,\vec y)) = (\vec x, \vec y)$.

Let  $\ket {x }  \ i n  \m ath bb{C}^2$ w it h $x\ in \F_2 $  b e a  qu b it. We denote  by $H$ the [*H adamar dfun c tion*] {} $$ x\ map sto \frac 1  {\s qrt 2} (\ ket{0} + (-1)^ x  \ket{1 }).$$Webri efly wr it e $ H_ n $ f o rthe $n$ -fold te ns or  prod uct$ H \ otim es\ldo ts \o times H$. Let  $\ ket{ x }\k et{y} \in \ math bb {C}^4 $ be a  $2$- qu bit system. The  $\c not$ (con tro ll ed** not** )  funct ion  is  the un iversal emb ed d i n gof the identity fu nc t i on , i.e. $ \ket{x } \k et { y} \maps to  \k et{x } \ ket{x +y}$ .  W e call t he fir s tqu bit $\k et {x}$ [ *c ont rol  bit* ] {},sincewe perfo rm a* *not** on $\ke t {y}$ iff $x=1 $ .A  [ * Simo n f unction*]{}  isa  per iodi c  $ (2: 1 )$-Bo olean  f u nc t ion defined as foll ow s.

\[ def:s imon\] Let $f :\F_2^n\to \ F _2^n$. W e ca l l$ f$ a [*Simon f uncti on*]{} ift here exi sts s ome peri od $\vecs \in \F_2 ^n\se tmi nus \ Z er o$ such thatf o r al l$\vec x , \ vec y \ in\F_ 2^n $ w ehave $$f(  \vec x)  =  f (\v ecy) \L e ftrighta rr ow\v ecy = \ v ec x +  \vec  s.$ $In [*S imon’sp ro b l em*] {}  w e ha veto  find  $\v e c s $ given  oracle a cce s s to  $ f$ .

In o rder to solve  S imon’s pro bl emclassi c a lly, wehave to find some colli s ion $\v ecx \no t= \ vec y$ sa tis fying$
vec y_i\rangle_= 0_\textrm{ for all }_i \}$.

For_a_Boolean function_$f:_\F_2^n \rightarrow \F_2^n$_we denote its_[*universal (quantum) embedding*]{} by_$$U_f: \F_2^{2n} \rightarrow_\F_2^{2n}_\textrm{ with } (\vec x, \vec y) \mapsto (\vec x, f(\vec x)+\vec y).$$ Notice_that_$U_f(U_f(\vec x,\vec_y))_=_(\vec x, \vec y)$.

Let $\ket{x}_\in \mathbb{C}^2$ with $x \in_\F_2$ be_a qubit. We denote by $H$ the [*Hadamard_function*]{}_$$x \mapsto \frac_1 {\sqrt 2} (\ket{0} + (-1)^x \ket{1}).$$ We briefly_write $H_n$ for the $n$-fold tensor_product $H \otimes_\ldots_\otimes_H$. Let $\ket{x}\ket{y}\in \mathbb{C}^4$_be a $2$-qubit system. The $\cnot$_(controlled **not**) function is the universal_embedding of the identity function, i.e. $\ket{x}\ket{y}_\mapsto \ket{x}\ket{x+y}$. We call the first_qubit $\ket{x}$ [*control bit*]{}, since_we perform_a **not** on $\ket{y}$ iff_$x=1$.

A [*Simon function*]{}_is a_periodic $(2:1)$-Boolean function_defined as follows.

\[def:simon\] Let $f:\F_2^n\to \F_2^n$._We call $f$_a [*Simon function*]{} if there exists_some_period $\vec s_\in_\F_2^n_\setminus\Zero$ such_that for all_$\vec_x, \vec_y_\in \F_2^n$ we have $$f( \vec_x)_= f( \vec y) \Leftrightarrow \vec y_= \vec x +_\vec_s.$$ In [*Simon’s problem*]{}_we have to find $\vec_s$ given oracle access to $f$.

In_order to_solve Simon’s_problem classically, we have to find some collision $\vec x \not=_\vec y$ satisfying $