QFT∣j⟩=N1∑k=0N−1e2πijk/N∣k⟩, N=2n. Circuit: H + controlled-Rk (Rk=diag(1,e2πi/2k)) + final swaps. Cost: O(n2) gates vs classical FFT O(n2n). Caveat: amplitudes, not data — you cannot read them all out. QFT pays off inside period-finding structures.
Given U∣u⟩=e2πiφ∣u⟩: t ancillas in H⊗t, controlled-U2j, inverse QFT, measure →φ to t bits. Success ≥1−ϵ with t=nprec+⌈log(2+2ϵ1)⌉. Materials use: U=e−iHτ⇒ eigenphases give energies Ek — the fault-tolerant route to spectra.
Factor N: pick a; find order r of amodN via QPE on U∣y⟩=∣aymodN⟩; if r even and ar/2=−1: gcd(ar/2±1,N) gives factors. Continued fractions recover r from measured φ≈s/r. Cost: O((logN)3) vs. sub-exponential classical (GNFS).
Oracle Of∣x⟩=(−1)f(x)∣x⟩; diffusion D=2∣s⟩⟨s∣−I, ∣s⟩=H⊗n∣0⟩. Iterate G=DOf about R≈4πN/M times (M marked of N). Geometry: each G rotates by 2θ, sinθ=M/N. Overshooting reduces success — Grover is not monotone. Quadratic speedup is provably optimal for unstructured search.