Could quantum circuit depth or gate count for MixColumns implementation affect practical attack feasibility more than diffusion strength?

I appreciate the specific question, but I need to be direct: the provided preprints don't address your question about MixColumns gate depth versus diffusion strength in practical cryptanalysis.

Here's why: Your question asks about a concrete trade-off in symmetric cipher design—whether the *implementation cost* of a diffusion layer (MixColumns in AES, for instance) could outweigh its *security benefit* against real attackers. That's a classical cryptanalysis and hardware-implementation question.

The preprints cover:

• Quantum attacks on symmetric ciphers [AG-2024.07-2243, AG-2024.07-1997] — these assume the cipher is already fixed and ask whether quantum algorithms can break it faster
• Quantum circuit optimization [AG-2024.04-2284, AG-2024.05-1701, AG-2024.03-1393] — these improve *arbitrary* quantum arithmetic, not cipher-specific operations
• Quantum hardware vulnerabilities [AG-2024.06-1682] — attacks on quantum computers themselves, not classical cryptanalysis

None directly analyze the classical trade-off between the gate count/latency of implementing MixColumns in hardware versus its contribution to differential/linear resistance. To answer your question properly, you'd want papers on classical differential cryptanalysis, hardware implementation metrics for AES variants, or cipher design principles—which don't appear in this archive.