The Subset Sum problem asks whether, given \(n\) integers and a target, some subset sums to the target. Its best known worst-case classical running time is \(O^*(2^{n/2})\), while the previous best quantum upper bound was \(O^*(2^{n/3})\). The \(k\)-SUM problem asks whether one can select entries from \(k\) lists that sum to a target.
We present a new quantum algorithm for worst-case \(k\)-SUM that improves the best known exponent for all \(k\) congruent to \(3\) or \(6\) modulo \(7\). Unlike the preceding bound, it gives a worst-case guarantee rather than one restricted to single-solution random instances. Combining our algorithm for 7-SUM with the standard block reduction yields an \(O^*(2^{2n/7})\) quantum algorithm for Subset Sum, improving the previous \(O^*(2^{n/3})\) bound.
We came up with quite a simple quantum algorithm for the $k$-SUM problem. The previous fastest worst-case quantum algorithm ran in time roughly $n^{0.33k}$, and we pushed this down to roughly $n^{0.29k}$ for large $k$. This also gives a $2^{2n/7} \approx 2^{0.286n}$ quantum upper bound for Subset Sum (note that the classical quantum techniques cannot beat the $0.25$ barrier without improving the deterministic $2^{0.5 n}$ algorithm).
The algorithm itself is very easy. In fact, it is similar to what was already known in the cryptographic literature, but the previous results applied only random instances of $k$-SUM.