Quantum annealing
Quantum annealing is a heuristic optimization technique that encodes a problem's cost function as the energy of an Ising or QUBO Hamiltonian and then physically evolves a system of qubits toward a low-energy configuration whose spins encode a good solution. It is inspired by adiabatic quantum computation and is the operating principle of machines built by D-Wave.
How it works
The user maps an optimization problem onto an Ising model: each binary variable becomes a qubit with a tunable local field, and pairwise couplings represent the problem's constraints. The machine starts in the easily prepared ground state of a simple transverse-field Hamiltonian, then slowly interpolates toward the problem Hamiltonian (Kadowaki and Nishimori 1998). If the change is slow enough and the system stays cold and isolated, the adiabatic theorem suggests it should track the instantaneous ground state and end near the problem's minimum-energy state (Farhi et al. 2000). In practice, thermal noise, finite runtime, and small energy gaps mean the process is stochastic, so a program is run thousands of times and the best sample is returned.
Not a universal quantum computer
Quantum annealing is a special-purpose model, not the gate-based circuit model. A Quantum annealer does not apply a programmable sequence of quantum logic gates, cannot express an arbitrary Quantum circuit, and therefore cannot run Shor's algorithm or Grover's algorithm. Its native task is finding low-energy states of Ising Hamiltonians, which maps naturally onto combinatorial optimization, sampling, and some machine-learning subroutines. This distinction matters for cryptography: annealers are irrelevant to the Q-Day threat model and do not affect whether Bitcoin is quantum safe, because breaking public-key cryptography requires the period-finding structure of the gate model, not energy minimization.
Hardware
D-Wave annealers are built from flux qubits implemented with superconducting circuits and Josephson junctions, cooled to roughly 15 millikelvin. Successive generations grew from 128 qubits in the D-Wave One (2011) to more than 5000 qubits in the Advantage processor, with a fixed sparse coupling graph. Because the graph is not fully connected, embedding a dense problem consumes many physical qubits per logical variable, which limits the effective problem size well below the raw qubit count.
The speedup debate
Whether these machines deliver a genuine quantum speedup has been contested since the first commercial units shipped. Early experiments found evidence of quantum behavior such as tunneling through energy barriers and correlations consistent with quantum annealing rather than classical thermal annealing (Boixo et al. 2014). A widely cited study then argued that, when compared carefully against optimized classical solvers on the same problems, no clear scaling advantage was visible, and it laid out how a real speedup should be defined and measured (Rønnow et al. 2014). The current consensus as of early 2026 is nuanced: quantum effects are present in the hardware, and specific structured instances can favor annealing, but a broad, practically useful speedup over the best classical methods has not been demonstrated. This places annealing in a different debate from gate-model Quantum advantage claims.
Limitations
- Only problems expressible as Ising or QUBO Hamiltonians map directly onto the hardware.
- Sparse connectivity forces minor-embedding overhead that reduces usable problem size.
- Analog control errors and thermal noise degrade solution quality; there is no fault-tolerant error correction of the kind used in the gate model.
- Results are probabilistic and often require many reads plus classical post-processing.
Status
Annealers remain the most widely deployed commercial quantum hardware by qubit count and are offered through cloud access for optimization research, logistics, and sampling workloads. As of early 2026 they are used as heuristic co-processors rather than as machines with a proven advantage, and they are architecturally separate from the gate-model systems pursued by most other quantum computing efforts.
Frequently asked questions
Can a quantum annealer run Shor's algorithm?
No. Quantum annealers solve optimization problems and cannot execute Shor's algorithm, so they pose no threat to RSA or elliptic curve cryptography.
Is quantum annealing proven to be faster than classical computing?
Not in general. A clear, scalable speedup over the best classical solvers on practical problems has not been established as of early 2026.
Sources
- Quantum annealing in the transverse Ising model (arXiv (Phys. Rev. E), 1998)
- Quantum Computation by Adiabatic Evolution (arXiv, 2000)
- Defining and detecting quantum speedup (arXiv (Science), 2014)
- Evidence for quantum annealing with more than one hundred qubits (arXiv (Nature Physics), 2014)
- D-Wave quantum annealing systems (official site) (D-Wave, 2025)
Cite this entry
"Quantum annealing." postquantum.wiki. Updated July 11, 2026. https://postquantum.wiki/quantum-annealing@misc{pqwiki-quantum-annealing,
title = {Quantum annealing},
howpublished = {\url{https://postquantum.wiki/quantum-annealing}},
year = {2026},
note = {postquantum.wiki, updated 2026-07-11}
}