Abstract 1 Introduction 2 Preliminaries 3 Anti-concentration Bound 4 Mixing Bound for Random Circuits 5 Applications References

Anti-Concentration for the Unitary Haar Measure and Applications to Random Quantum Circuits

Bill Fefferman ORCID Department of Computer Science, The University of Chicago, IL, USA Soumik Ghosh ORCID Department of Computer Science, The University of Chicago, IL, USA Wei Zhan ORCID Department of Computer Science, Purdue University, West Lafayette, IN, USA
Abstract

We prove a Carbery-Wright style anti-concentration inequality for the unitary Haar measure, by showing that the probability of a polynomial in the entries of a random unitary falling into an ε range is at most a polynomial in ε. Using it, we show that the scrambling speed of a random quantum circuit is lower bounded: Namely, every input qubit has an influence that is at least inverse exponential in depth, on any output qubit touched by its lightcone. Our result on scrambling speed works with high probability over the choice of a circuit from an ensemble, as opposed to just working in expectation.

As an application, we give the first polynomial-time algorithm for learning log-depth random quantum circuits with Haar random gates up to polynomially small diamond distance, given oracle access to the circuit. Other applications of this new scrambling speed lower bound include:

  • An optimal Ω(logε1) depth lower bound for ε-approximate unitary designs on any circuit architecture;

  • A polynomial-time quantum algorithm that computes the depth of a bounded-depth circuit, given oracle access to the circuit.

Our learning and depth-testing algorithms apply to architectures defined over any geometric dimension, and can be generalized to a wide class of architectures with good lightcone properties.

Keywords and phrases:
Haar measure, anti-concentration, random quanytum circuit, learning
Copyright and License:
[Uncaptioned image] © Bill Fefferman, Soumik Ghosh, and Wei Zhan; licensed under Creative Commons License CC-BY 4.0
2012 ACM Subject Classification:
Theory of computation Quantum computation theory
Related Version:
Full Version: https://arxiv.org/abs/2407.19561
Acknowledgements:
The authors thank Anurag Anshu, Adam Bouland, Lijie Chen, Jonas Haferkamp, Robert Huang, Issac Kim, Yunchao Liu, Tony Metger, Marcus Michelen, Tommy Schuster and Kewen Wu for helpful comments and discussions, and thank Jacob Watkins for pointing out a mistake in our previous version of Section 5.3.2.
Funding:
B.F., S.G., and W.Z. acknowledge support from AFOSR (FA9550-21-1-0008). This material is based upon work partially supported by the National Science Foundation under Grant CCF-2044923 (CAREER), by the U.S. Department of Energy, Office of Science, National Quantum Information Science Research Centers (Q-NEXT) and by the DOE QuantISED grant DE-SC0020360.
Editor:
Shubhangi Saraf

1 Introduction

Random quantum circuits are one of the most popular paradigms of quantum computation in the near-term era. They are well-studied, both theoretically and experimentally, in the context of quantum advantage demonstrations: e.g., see [6, 8, 3, 7, 43, 44, 21]. They also have numerous applications in areas like benchmarking, like in [19, 37], in cryptography, as in e.g., [4, 2, 50], and in the modeling of physical objects like black holes, as in e.g., [30, 49, 52].

One reason random quantum circuits are extensively studied is because they are rapid “scramblers” of information. Intuitively, this means that the output state it generates has non-trivial correlations across spatially separated qubits. The rate of scrambling depends on the depth – the deeper the circuit is, the better it is at scrambling. However, even though previous works on scrambling have put upper bounds on the scrambling speed of random circuits – see, e.g., [28, 11, 46, 27, 33, 13, 14, 23, 42, 36, 16, 51, 17, 53]lower bounds on the scrambling speed are not well studied.

In this work, we give a lower bound on the speed with which random quantum circuits can scramble information. Our main theorem is as follows:

Theorem 1.

Let 𝒞 be a random quantum circuit with a fixed architecture, where each gate is a k-qubit independent Haar random unitary. Let ρ and π be a pair of input and output qubits connected by D layer of gates. Arbitrarily fix the inputs to 𝒞, except the qubit ρ, and let Φ𝒞 be the channel that maps ρ to π.

Then for every γ>0, with probability at least 1γ over 𝒞 the following holds: For every two single-qubit states ρ and ρ,

Φ𝒞(ρ)Φ𝒞(ρ)FρρF(2Dγ)ck (1)

where F denotes the Frobenius norm, and ck>0 is a constant that depends only on k.

In particular, our main result gives a lower bound on the influence that changing an input qubit has on a designated output qubit inside the lightcone of that input qubit and shows that it decays at most exponentially fast with depth. We articulate some points that make Theorem 1 useful for our applications:

  • The bound in Theorem 1 is uniform, in the sense that ratio (2Dγ)ck does not depend on how the input qubits are chosen, and is applicable to any circuit architecture. Moreover, the probability quantifier over the circuit 𝒞 is stated before the choices of ρ and ρ, which is specifically important for our application on learning random quantum circuits (Theorem 5).

  • Although we stated the theorem using Frobenius norm, the norm is only over single-qubit states and thus is equivalent to any other matrix norm.

  • To obtain the strongest bound, we can choose D to be the shortest path from ρ to π. When π is outside the lightcone of ρ, we think of D=, in which case the statement still holds.

  • Our bound in Theorem 1 is tight, in the sense that one could prove a matching upper bound

    Φ𝒞(ρ)Φ𝒞(ρ)FρρF(2Dγ)ck (2)

    for various architectures with a different constant ck<ck, by calculating the moment 𝐄[Φ𝒞(ρ)Φ𝒞(ρ)F2]. Such calculation can be done by analyzing the Markov chain of Pauli operators, using the results in [28, 11, 45]. However, the moment method could not yield our lower bound, which we will explain in details below.

Implications on proving typicality statements.

Observe that Theorem 1 is a statement that works with high probability over the choice of circuit from the ensemble 𝒞, as opposed to just in expectation over the ensemble 𝒞. To the best of our knowledge, this is the first typicality result regarding the scrambling behavior of random quantum circuits.

Most of the previous work studying random quantum circuits examines their properties by computing some specific quantities of interest in expectation, such as entanglement entropy, OTOC and collision chance, by relating the quantities with the lower moments (usually the second moment) of the quantum circuit. For non-negative quantities the expectation already provides an upper bound that holds with high-probability (like in (2)) by Markov’s inequality. But for proving a strong typicality result as in (1), one also needs a corresponding lower bound, which is commonly proved by calculating the variance of the desired quantity X. In particular, we would want that for some appropriately small ϵ, and for some t1,

𝐄[X2t](1+ϵ)𝐄[Xt]2. (3)

However, for most architectures a relation like (3) is largely unknown. One reason is that when X is already a second moment of the quantum circuit, and proving (3) requires computing the fourth or higher moments, which is extremely difficult even for standard brickwork circuits [9]. More importantly, in our case, X can be heuristically approximated by the product λ1λD of i.i.d random variables λ1,,λD that follow some distribution Λ with constant variance; because of this, we cannot expect (3) to hold as 𝐄[X2t] will be exponentially larger than 𝐄[Xt]2.

In this work, we overcome this barrier by performing a more fine-grained analysis. We do not analyze the randomness present in the choice of gates all at once; Instead, we break up the randomness of the circuit into D layers and lower bound the random variable X with a product of D random variables that are highly correlated. We then decouple these random variables using a new anti-concentration inequality on the unitary Haar measure, which will be stated in Theorem 6. This allows us to avoid calculating higher moments of the circuit, and still retrieve information about the distribution of X that could be lost in the moments. Our result in Theorem 1 directly implies typicality guarantees on other quantities, such as the purity of a single output qubit, and we believe the method we use can be generalized to prove typicality results for many other useful quantities.

1.1 Applications

Intuitively, Theorem 1 means that the output state of random quantum circuits with logarithmic depth carries a signal pertaining to its input state that can be extracted from the output state using single qubit quantum state tomography. This allows us to show many applications.

1.1.1 Optimal 2-design lower bounds

First, as an immediate corollary of Theorem 1, we show a depth lower bound for random quantum circuits, defined on any architecture, forming approximate unitary designs; see Section 5.1.

Theorem 2.

Let 𝒞 be a random quantum circuit, defined on an arbitrary fixed architecture of minimum depth D, where each gate is a k-qubit independent Haar random unitary. If 𝒞 is an ε-approximate 2-design, then

D=Ωk(logε1).

Here the minimum depth means the smallest number of gates that any path from input to output goes through, resulting in a stronger requirement than the previous depth lower bounds that uses the lightcone size property. Theorem 2 shows that previous works on approximate t-design constructions, e.g. [28, 32, 24, 15, 50], are optimal in ϵ, assuming the gates are Haar random unitaries. And combined with the Ω(logn) depth lower bound in [18, 50], it means that the approximate t-design construction of depth O(log(n/ε)tpolylogt) from [50] is optimal in both n and ε.

1.1.2 Testing for depth

Our second application concerns testing the depth of a random circuit when the depth is promised to be at most logarithmic.

Theorem 3.

Let 𝒞 be a brickwork random quantum circuit on n qubits of an unknown depth D promised to be bounded as D=O(logn), where each gate is independently Haar random. Given oracle access to 𝒞, there is a polynomial time algorithm that outputs D with probability 11/poly(n).

Although Theorem 3 is stated with brickwork circuits for simplicity, it is applicable to many other architectures satisfying the following: For a random circuit of depth D, the lightcone size is strictly smaller than that of a random circuit of depth larger than D. Hence, there will be a particular output qubit which will be insensitive to a change in a particular input qubit in the former case and will be sensitive in the latter case. For D=O(logn) this difference is inverse polynomially large and can be tested by state tomography. The explicit algorithm is given in Section 5.2.

Note that our algorithm outputs the exact depth instead of obtaining an approximation, in contrast with the recently proposed depth test algorithm in [26]. This is partially due to the fact that our algorithm works with high probability with respect to the choice of a circuit from the ensemble, as opposed to working only in expectation, unlike [26].

1.1.3 Learning brickwork random circuits

Third, we show that Theorem 1 allows us to learn brickwork random circuits of logarithmic depth. We start by showing that the first layer of gates can be learned given oracle access to the circuit.

Theorem 4.

Let 𝒞 be a brickwork random quantum circuit on n qubits of known depth D=O(logn), where each gate is independently Haar random. Given oracle access to 𝒞, there is a polynomial time algorithm that with high probability outputs each gate in the first layer with polynomially small error.

Furthermore, in real life scenarios we can assume the distribution over the gates is a discrete approximation of the Haar measure (see Definition 28), and in this case we can actually learn the entire circuit:

Theorem 5.

Let 𝒞 be a brickwork random quantum circuit on n qubits of known depth D=O(logn), where each gate is independently drawn from a discretized version of the Haar measure. Given oracle access to 𝒞, there is a polynomial time algorithm that with high probability outputs 𝒞 with polynomially small error.

We will prove Theorem 4 and Theorem 5 in Section 5.3. Note that the learning algorithm in Theorem 5 is proper, that the learnt circuit has the exact same depth and architecture as the actual circuit 𝒞.

Before this work, the state-of-art learning algorithm for brickwork quantum circuits is due to [31, 35], which runs in polynomial time for circuits of k-dimensional geometry up to O(log1/(k+1)n) depth, and is not proper (that the outputted circuit has depth larger than the input circuit by at least a constant factor). Our algorithm works for all geometric dimensions, works up to O(logn) depth, and still has polynomial runtime. There is evidence that the depth dependence of our learning algorithm is optimal, because random circuits form high enough designs beyond logn depth [50], and possibly also pseudorandom unitaries, which hints at learning hardness.

Here we provide an informal description of the learner:

  • For each gate in the first layer, the learner iteratively searches through the gate set for the correct gate. There’s only polynomially many gates in the gate set because we chose an appropriate ε-net over 2-qubit Haar random unitaries. During each round, the learner applies the inverse of a gate chosen from the gate set at the particular location it wishes to learn.

  • Select an input qubit to the gate we are trying to learn. The key observation is that, depending on whether we applied the correct inverse, the output lightcone will consist of different qubits. In particular, one qubit will lie outside the lightcone and be unaffected by a change in the selected input qubit if we hit the correct inverse, as opposed to if we didn’t. As a corollary of Theorem 1, in the former case, we can detect the influence of the input qubit by performing single qubit state tomography.

    Figure 1: An illustration of the learning algorithm in Theorem 5, where we try to uncompute the gate G by applying some two-qubit unitary G before it. Left: When G failed to uncompute G, the lightcone of the input qubit ρ touches an output qubit π at distance D. Right: When G=G, the output qubit π falls out of the lightcone and will not be affected by the change in ρ.

Note that the learner of [31, 35] uses a very different strategy: it looks at each output qubit, and then employs a brute force search over all possible lightcones of that circuit to find the correct one. Thereafter, it stitches together all the different local lightcones of every qubit, and then corrects for the errors in the overlapping regions of the different lightcones. The fact that we do not do a brute force search over all possible lightcones makes our algorithm efficient for any dimension, and not just 1-dimensional brickwork circuits.

1.2 Main Technical Tool: Anti-Concentration for Haar Measure

The intuition behind the proof of Theorem 1 is the following: We consider the path of D+1 qubits ρ=ρ0,ρ1,,ρD=Φ𝒞(ρ) in the circuit 𝒞, where gate Gi has ρi as an input and ρi+1 as an output. Let ρi be the corresponding qubits when the input is ρ, and we want to bound the ratios λi=ρiρiF/ρi1ρi1F and hence their product.

It turns out that we can prove the lower bound λi|F(Gi)|, where F is a polynomial function over the entries of Gi in its matrix representation. Therefore, we only need to show that |F(Gi)| is often not too small, when Gi is a Haar random unitary. In other words, we need to show that the polynomial does not concentrate around zero. Our main technical contribution is the following theorem which proves this anti-concentration phenomenon:

Theorem 6.

Let U be a Haar random n×n unitary matrix, and let F:2n2 be a degree-d polynomial on the entries of U and U. Then for every ε>0, it holds that

Pr[|F(U,U)|2ε𝐄[|F(U,U)|2]]C(n,d)εC(n,d)

where C(n,d)>0 and C(n,d)>0 are constants that depend only on n and d.

The anti-concentration inequality of polynomials over Gaussian random variables was famously proved by Carbery and Wright [12], and their result actually applies to any log-concave distribution over n. However, as the Haar measure does not even have a convex support, the proof techniques in [12] does not apply. The alternative inductive proof in [38] also fails to apply, as we are dealing with correlated input variables. We present a very different inductive proof in Section 3.

Note that if we consider F(U,U) as a complex random variable, and define the complex variance

𝐕𝐚𝐫[F]=𝐄[|F|2]|𝐄[F]|2=minz𝐄[|Fz|2],

then we obtain the form closer to the classical anti-concentration inequalities:

Corollary 7.

Let U be a Haar random n×n unitary matrix, and let F be a degree-d polynomial on the entries of U and U. Then for every ε>0 and every z, it holds that

Pr[|Fz|2ε𝐕𝐚𝐫[F]]C(n,d)εC(n,d).

However in this work we will not use the form in Corollary 7, as Theorem 6 suffices for our applications.

 Remark 8.

Unlike the Carbery-Wright inequality which is dimension-free, meaning the right hand side is C(d)εC(d) and does not depend on n, we have C(n,d)=(4n2d)1 and C(n,d)=O(n3d) in our proof. In fact, using the concentration bounds it is not hard to show that C(n,d) must depends polynomially on n. However, we conjecture that C(n,d) could be independent of n, in which case the result would be applicable to random quantum circuits with gates of higher locality.

1.3 Related Works

Concentration phenomenon on unitary Haar measures has been extensively studied, and the readers can refer to [39] for a comprehensive review of the results. In comparison, much less has been shown for the reverse direction, namely the anti-concentration inequalities.

One common way to prove such inequalities is by calculating higher moments and apply the Paley-Zygmund inequality, which was indeed used for showing the anti-concentration property of output distributions of Haar random unitaries and random quantum circuits [1, 25, 18]. However, the inequality proved this way is not strong enough for our applications, while calculating moments of a random quantum circuit is also non-trivial and depends highly on the architecture [22, 9]. Instead, we resort to prove a general anti-concentration inequality for polynomials, whose theory has been well developed for Gaussian distributions [12] and product distributions (namely the Littlewood-Offord theory) and has found numerous applications in computational complexity theory [41, 40, 34]. Our inductive proof of Theorem 6 also shares a similar spirit with the elementary proof of Carbery-Wright inequality in [38].

Multiple notions of scrambling property of random quantum circuits has been previously studied. In particular, [11] showed that in a random circuit consists of O(nlog2n) sequential applications of Haar random gates on a complete graph of n qubits, every subset of cn qubits is polynomially close to maximally mixed with high probability for some constant c>0. Our Theorem 1 can be viewed as a result in the reverse direction which bounds the scrambling speed of such random circuits. Specifically, at least Ω(nlognloglogn) sequential gates are required, as otherwise with high probability a pair of input and output qubits are o(logn) depth apart due to a generalization of the coupon-collector problem [48]. It is also reasonable to believe that our method of proving Theorem 1, via the anti-concentration inequality, is applicable to obtain lower bounds for other measures of scrambling such as entanglement and out-of-time-ordered correlation (OTOC) [45, 46, 5, 27]. Upper bounds in the above-mentioned works are obtained by calculating moments and analyzing the averaged Markov chain on Pauli operators, which are not sufficient to prove lower bounds in the typical case.

We also review some previous works related to our applications and clarify the connections. For approximate unitary designs, many previous constructions, for example [28, 10, 24, 29, 15], employed Haar random unitary gates and achieved the optimal O(logε1) dependence on ε. The construction of depth O(log(n/ε)tpolylogt) in the recent work of [50] also falls into this category. Meanwhile, they also proposed a construction of approximate 3-design with only O(loglog(n/ε)) depth. This does not contradict our lower bound Theorem 2 as the construction uses random Clifford unitaries, which are not independent between layers and also fail the anti-concentration property in Theorem 6. It is intriguing, however, to see if our argument can be extended to show a matching Ω(loglogε1) depth lower bound.

The depth test algorithm in [26] is based on the entanglement dynamics of random circuits and implemented with their Bell sampling framework. For brickwork circuits, as there is a constant gap between the upper and lower bounds for the entanglement entropy in the typical case, their algorithm gives constant approximation of the depth. For general architectures, the algorithm in [26] also requires knowledge of the entanglement velocity, while our algorithm for Theorem 3 only relies on a specific property of the architecture that the lightcone strictly expands with depth.

The learning algorithm for shallow quantum circuits in [31] is based on the idea of brute-force enumerating all possibilities in a light cone, and stitching the parts together. Therefore, their algorithm works any quantum circuit in worse case, and has complexity exponential in the lightcone size. This means that in order to have polynomial efficiency, the depth has to be O(log1/kn) for k-dimensional geometrically local circuits and O(loglogn) for general architectures. However, the learning algorithm is improper and the outputted circuit has a large polynomial blow-up in depth. The blow-up factor could be reduced to constant, at the cost of lowering the depth bound to O(log1/(k+1)n), and thus could not perform in polynomial time for log-depth circuits even for 1-dimensional geometry. In comparison, our algorithm works for random quantum circuits, on the fixed brickwork or similar geometrically local architecture, where neighboring qubits can be distinguished by their lightcones. The strength of our algorithm Theorem 5 is that it works up to logarithmic depth in polynomial time regardless of the geometric dimension, and it learns properly in that it outputs a circuit with the exact same architecture. This makes our result incomparable with [31].

We also mention that, there is a different learning task where instead given oracle access to the circuit 𝒞, the learner is only given copies of the state 𝒞|0n, and needs to learn a circuit that prepares the same state with error in trace distance. Our algorithm relies on having different inputs and hence does not work in this case, whereas [31] gave a quasi-polynomial efficiency algorithm for 2D and the algorithm was extended to higher dimensions in [35].

2 Preliminaries

We start with some basic notations. We use 𝕌(d) to denote the unitary group of dimension d, and use 𝒰(d) to denote the Haar measure over 𝕌(d). We use Greek letters such as ρ,π,τ to denote density matrices of quantum states. We use 1 and F for trace norm and Frobenius norm, and d(,) for diamond distance between unitary channels, defined as

d(Φ1,Φ2)=maxρ(Φ1𝕀)ρ(Φ2𝕀)ρ1,

with maximum taken over all density matrices ρ.

A circuit architecture determines the positions of gates in the circuit. We define the depth of an architecture as follows.

Definition 9.

In a circuit architecture, a path in space-time between two qubits ρ and ρ is a sequence of qubits ρ=ρ0,ρ1,,ρD=ρ where for each i, there is a gate in the circuit that has ρi as an input and ρi+1 as an output.

We say the architecture has minimum depth D, if there exists a pair of input and output qubits connected by a path of length D, and every other path from input to output has depth at least D.

A specific architecture of interest is the (1-dimensional) brickwork architecture:

Definition 10.

A brickwork quantum circuit on n qubits of depth D consists of D layers of gates, where on layer j, there is a two-qubit gate Gi,j=Gi+1,j acting on the i-th and (i+1)-th qubit if and only if i and j have the same parity.

The brickwork architecture could be generalized to higher dimensional geometry, and our results still hold for any constant dimension. However, for simplicity we stick with the 1-dimensional architecture in this paper.

We will need the following statements about quantum state tomography on single qubits for our algorithms (see e.g. [47])

Proposition 11.

Given access to copies of a single-qubit state ρ, one can output an estimation ρ~ with ρρ~Fε in poly(1/ε) time.

The following simple lemma is particularly useful, which bounds the difference between states through a channel:

Lemma 12.

Let Φ be a quantum channel that takes k qubits as the input. For every input states ρ and ρ, we have

Φ(ρ)Φ(ρ)F2k/2ρρF.

As we are frequently dealing with differences between quantum states, here we present some facts about the space of such differences. We start from the Bloch sphere presentation of a single-qubit state:

ρ=12(I+rxX+ryY+rzZ),rx,ry,rz,rx2+ry2+rz21 (4)

where

I=[1001],X=[0110],Y=[0ii0],Z=[1001]. (5)

Then the difference ρρ between two single-qubit states can be written in the Pauli basis

ρρ=rxX+ryY+rzZ,rx2+ry2+rz2=12ρρF21. (6)

Therefore, if we view ρρ under the coordinate system 2(rx,ry,rz), then the set Δ1 of all possible single-qubit differences can be identified with a ball of radius 2 in 3. The Euclidean space 3 is equipped with the standard trace inner product A,B=Tr[AB], so that the norm coincides with the Frobenius norm.

More generally, let Δk be the set of all possible differences between two k-qubit states ρ and ρ. The difference ρρ can be written as a real linear combination over the Pauli basis

{I,X,Y,Z}k{Ik}

where the identity is removed as Tr[ρρ]=0. Since the Pauli basis are orthonormal, we can think of Δk as a subset of the Euclidean space 4k1 (although the set is much more complicated than a ball for k>1). The Euclidean space is also equipped with the standard trace inner product and the Frobenius norm. As a result, a quantum channel Φ with k-qubit input and n-qubit output induces a linear map from Δk to Δn:

ρρΦ(ρ)Φ(ρ),

which is also a real linear map from 4k1 to 4n1.

3 Anti-concentration Bound

In this section we prove Theorem 6. For simplicity, we introduce the notion of semi-polynomials: A function is a degree-d semi-polynomial in complex variables z1,,zn, if it is a polynomial in z1,,zn,z1¯,,zn¯ of degree at most d. Now Theorem 6 is implied by the following more general form:

Theorem 13.

Let mn, and F:nm be a degree-d semi-polynomial. Suppose that F takes as inputs the entries of the first m columns of an n×n unitary matrix, and that the value of F is always a non-negative real number over this domain. Then for U𝒰(n),

Pr[F(U1,1,,Un,m)ε𝐄[F]]C(n,m,d)εC(n,m,d)

holds for every ε>0, where C(n,m,d)>0 and C(n,m,d)>0 are constants that depend only on n,m and d.

To see that Theorem 13 implies Theorem 6, it suffices to take m=n and notice that |F|2=FF¯ is a degree-2d semi-polynomial that is always non-negative. We prove Theorem 13 via induction, and the proof is divided into four stages.

3.1 𝒎=𝟏,𝒏=𝟏

We start with the simplest case when m=n=1. In this case F: is a single-variable degree-d semi-polynomial over the unit circle {z:|z|=1}. Since z¯=1/z over this domain, assuming F0 we can write F as

F(z)=G(z)/zd

where G(z)=α(zz1)(zz2d) is a degree 2d polynomial in z. Without loss of generality we can assume that |α|=1, and therefore

F(z)=|F(z)|=|G(z)|=|zz1||zz2d|. (7)

Then we can bound the expectation of F as

𝐄[F]sup|z|=1|zzi|(1+|zi|). (8)

On the other hand, if |zzi|>δ0 for some |z|1, it is easy to show that

|zzi|1+|zi|>δδ+2. (9)

Thus if |zzi|>δ holds for all i=1,,2d, then

F(z)=|zzi|>(δδ+2)2d(1+|zi|)(δδ+2)2d𝐄[F]. (10)

That means, if we take ε=(δδ+2)2d, then F(z)ε𝐄[F] only happens when z falls into one of the δ-balls around some zi. Each δ-ball intersect with the unit circle as an arc of angle at most 4δ, and thus has measure at most 2δ/π under the Haar measure over the unit circle. Therefore we conclude that

Pr|z|=1[F(z)ε𝐄[F]] min{4dδ/π,1}
=min{8dπε1/(2d)1ε1/(2d),1}(8dπ+1)ε1/(2d), (11)

and we can take C(1,1,d)=1/(2d) and C(1,1,d)=8d/π+1.

3.2 𝒎=𝟏,𝒏=𝟏, Alternative Distribution

For the sake of later use, we also need a version where z=u1 follows the distribution of the first coordinate of a Haar-random unit vector (u1,,un)n, n2. In this case z¯=1/z no longer holds, and we need an alternative method.

For every r, 0r1 we define

P(r)=𝐄|u1|=r[F(u1)]

where the expectation is over a Haar-random z with |z|=r. Notice that a monomial u1ku1¯ in F has expectation 0 unless k=, and when k= we have u1ku1¯=r2k. That means P(r) is a degree-d polynomial in r2.

Notice that r2 follows the Beta distribution Beta(1,n1), with the density function

f(r;1,n1)=(n1)(1r)n2,

and 𝐄[P(r)] under this distribution coincides with 𝐄[F].

With the analysis in the previous section which also works on P(r), we can show that if we take ε=(δδ+2)d, then P(r)ε𝐄[P(r)]=ε𝐄[F] only happens when r2 falls into one of the δ-balls around d complex roots of P, which are intervals of length at most 2δ on the real line. Since the density function of r2 has a maximum of n1, we have

Pr[P(r)ε𝐄[F]]min{2d(n1)δ,1}4dnε1/d. (12)

On the other hand, applying Equation 11 from the previous section on F(rz) for every fixed r directly provides

Pr|z|=r[F(z)εP(r)](8dπ+1)ε1/(2d). (13)

Thus by a union bound we have

Pr[F(u1)ε𝐄[F]] Pr[P(r)ε𝐄[F]]+Pr[F(z)εP(|z|)]
4dnε1/(2d)+(8dπ+1)ε1/(4d)
4d(n+1)ε1/(4d). (14)

We note that not only this result will be used in the next stage, the technique itself will also be reapplied multiple times in the later proofs.

3.3 𝒎=𝟏,𝒏>𝟏

In this stage we consider m=1 with general n, and thus the inputs to F is a Haar-random unit vector (u1,,un)n. The strategy is to use induction on n, and show that with high probability over the choice of u1,

P(u1)=𝐄u2,,un[F(u1,,un)]

is not too small conditioned on the fixed u1. To handle this, we need the following lemma.

Lemma 14.

If F:n is a degree-d semi-polynomial, and (u1,,un)n is a Haar-random unit vector, then P(u1)=𝐄u2,,un[F(u1,,un)] is a degree-d semi-polynomial on u1.

Proof.

Omitted in this version.

Since P is an expectation over F, it is also always non-negative and has the same expectation as 𝐄[F]. Thus Equation 14 from the previous section gives

Pr[P(u1)ε𝐄[F]]4d(n+1)ε1/(4d). (15)

Now we fix some u1, and consider the degree-d semi-polynomial

Fu1(u2,,un)=F(u1,u2,,un)

which is always non-negative. Since (u2,,un)=ru for some r, and u follows the Haar measure over the unit sphere in n1, we can apply the induction hypothesis for n1 on Fu1(ru) to get

Pr[Fu1(ru)ε𝐄u[Fu1(ru)]]C(n1,1,d)εC(n1,1,d). (16)

Therefore we conclude that, for every p(0,1),

Pr[F(u1,,un)ε𝐄[F]]
Pr[P(u1)εp𝐄[F]]+Pr[F(u1,,un)ε1pP(u1)]
= Pr[P(u1)εp𝐄[F]]+Pr[Fu1(u2,,un)ε1p𝐄[Fu1]]
4d(n+1)εp/(4d)+C(n1,1,d)ε(1p)C(n1,1,d). (17)

We can take

C(n,1,d)=maxpmin{p4d,(1p)C(n1,1,d)}=14d+C(n1,1,d)1=14nd,

and C(n,1,d)=4d(n+1)+C(n1,1,d)=O(n2d).

3.4 𝒎>𝟏,𝒏>𝟏

Now we handle the general case when the inputs to the semi-polynomial consist of m columns of a Haar random unitary. The proof is similar to the last stage, using the fact that the input distribution can be viewed as a unitary-invariant distribution over m orthonormal vectors in n. In particular, let the vectors be v1,,vm, and we consider the function

P(v1,,vm1)=𝐄vm[F(v1,,vm)].

Here vm is a Haar-random vector over the unit sphere in the (nm)-dimensional orthogonal subspace of span(v1,,vm). We would like to show that P is a semi-polynomial in order to use induction, and we first show it with vm replaced with a Gaussian distribution.

Lemma 15.

Let v1,,vm be a set of m<n orthonormal vectors in n, and let g=(g1,,gn)n distributed as a standard (nm)-dimensional complex Gaussian in the orthogonal subspace of span(v1,,vm).

Let G:n be a degree-d semi-polynomial in (g1,,gn). Then

Q(v1,,vm)=𝐄[G(g1,,gn)]

is a degree-d semi-polynomial in the entries of v1,,vm.

Proof.

Omitted in this version.

Corollary 16.

P(v1,,vm1)=𝐄vm[F(v1,,vm)] is a degree-d semi-polynomial in the entries of v1,,vm1.

Proof.

Notice that vm is equidistributed as g/g2, where g=(g1,,gn) is the Gaussian in Lemma 15. In other words, g=rvm where r follows a fixed χ distribution independent of vm.

Now consider each monomial in F, and let G be the part of monomial over entries of vm, then it suffices to show that 𝐄[G(vm)] is a degree-d semi-polynomial in v1,,vm1. Lemma 15 already showed this for 𝐄[G(g)], and since G is a monomial of degree d, we have

𝐄[G(g)]=𝐄[G(rvm)]=𝐄[r]𝐄[G(vm)], (18)

where 𝐄[r] is a non-zero constant irrelevant to the choice of v1,,vm1. Therefore 𝐄[G(vm)] is also a degree-d semi-polynomial in v1,,vm.

Since P is an expectation over F, it is also always non-negative and has the same expectation as 𝐄[F]. Thus the induction hypothesis gives

Pr[P(v1,,vm1)ε𝐄[F]]C(n,m1,d)εC(n,m1,d). (19)

Now we fix some v1,,vm1 and consider the degree-d semi-polynomial

Fv1,,vm1(vm)=F(v1,,vm1,vm),

which is always non-negative. Since there exists a linear map A:nm+1n such that vm=Au, where u is a Haar-random unit vector in nm+1, we can apply Equation 17 from the previous stage for m=1 on Fv1,,vm1(Au) to get

Pr[Fv1,,vm1(Au)ε𝐄u[Fv1,,vm1(Au)]]C(n,1,d)εC(n,1,d). (20)

Therefore we conclude that, for every p(0,1),

Pr[F(v1,,vm)ε𝐄[F]]
Pr[P(v1,,vm1)εp𝐄[F]]+Pr[F(v1,,vm)ε1pP(v1,,vm1)]
= Pr[P(v1,,vm1)εp𝐄[F]]+Pr[Fv1,,vm1(vm)ε1p𝐄[Fv1,,vm1]]
C(n,m1,d)εpC(n,m1,d)+C(n,1,d)ε(1p)C(n,1,d), (21)

Similar to the previous stage, we can take

C(n,m,d)=1C(n,m1,d)1+C(n,1,d)1=14nmd,

and C(n,m,d)=C(n,m1,d)+C(n,1,d)=O(n2md). This completes the proof of Theorem 13.

4 Mixing Bound for Random Circuits

In this section we prove Theorem 1. Since the output qubit Φ𝒞(ρ) is in the lightcone of the input qubit ρ, there exists gates G1,,GD in the circuit 𝒞 that connect the input and output qubits. That is, there are qubits ρ0,ρ1,,ρD with ρ0=ρ and ρD=Φ𝒞(ρ), such that the gate Gi has ρi1 as an input and ρi as an output. Each gate Gi is independently drawn from the Haar measure 𝒰(2k).

Note that even when gate Gi is given, we cannot directly claim any relationship between ρi1 and ρi, as the other input qubits to Gi are correlated and possibly entangled with ρi1. To handle this, we let τi1 be the composite state of the k input qubits to Gi, and by Lemma 12 we have

τi1τi1F2k/2ρi1ρi1F, (22)

where ρi and τi are the corresponding states when the input state is ρ0=ρ. Therefore we only need to bridge the remaining gaps by proving

ρiρiFλiτi1τi1F (23)

where λi is some function of Gi, and then bound the distribution of λi by applying the anti-concentration bound from Theorem 6.

At a first glance, this looks impossible as τi1 is a k-qubit state while ρi is single-qubit, which means that as long as k>1, whatever Gi is, there will be input states τi1τi1 to Gi with the output qubits ρi=ρi. The key observation is that the states τi cannot be arbitrary k-qubit states: Since all the input qubits to the circuit 𝒞 are fixed except ρ, when the circuit 𝒞 is given, each τi is the result of ρ through a fixed quantum channel. As the difference ρρ ranges within the 3-dimensional Euclidean space Δ1, the difference τi1τi1 could also only range within a 3-dimensional subspace of Δk.

This allows us to define and bound the distribution of λi that uniformly holds for every such subspace as follows:

Lemma 17.

For every k, there exists a distribution Λk over [0,) that satisfies:

  • There exists t>0 such that 𝐄[Λkt]<, where we use 𝐄[Λkt] as shorthand for 𝐄xΛk[xt].

  • For every fixing of the input qubits other than ρ, and layers 1,,i1 of the circuit 𝒞, there exists a function λi:𝕌(2k)[0,) at layer i such that

    ρiρiFλi(Gi)τi1τi1F

    holds for all input states ρ and ρ, and λi(Gi)Λk when Gi𝒰(2k).

We will prove Lemma 17 in Section 4.1. For now let us show how Lemma 17 would imply Theorem 1.

Proof of Theorem 1.

From Lemma 17 and Equation 22 we get

ρiρiFλi(Gi)τi1τi1F2k/2λi(Gi)ρi1ρi1F (24)

for every i=1,,D. Here each function λi(Gi) depends on the previous layers, but as random variables λi=λi(Gi) they are independent, since λi follows the same distribution Λk no matter how λ1,,λi1 are fixed.

Since ρ0ρ0F=ρρF and ρDρDF=Φ𝒞(ρ)Φ𝒞(ρ)F, we have

Φ𝒞(ρ)Φ𝒞(ρ)F2kD/2λ1λDρρF. (25)

To bound the product of λi we use Markov’s inequality, which states that for every α>0,

Pr[λ1λDα] =Pr[(λ1λD)tαt]
αt𝐄[λ1tλDt]=αt𝐄[Λkt]D (26)

where we take t>0 to be the constant in Lemma 17. Take α such that γ=αt𝐄[Λkt]D, we conclude that with probability at least 1γ,

Φ𝒞(ρ)Φ𝒞(ρ)F 2kD/2αρρF
=2kD/2γ1/t𝐄[Λkt]D/tρρF
=(2Dγ)Ok(1)ρρF.

4.1 Proof of Lemma 17

The basic idea of the proof is to lower bound the ratio ρiρiF/τi1τi1F with a polynomial function on the entries of Gi and apply Theorem 6.

The quantum channel defined by Gi that maps τi1 to ρi induces the linear map

Mi:τi1τi1ρiρi.

The domain of Mi is a 3-dimensional subspace of Δk which we denote as 𝒮i, while the range of Mi is Δ1. Notice that the map Mi is completely determined by the domain 𝒮i and the gate Gi, while 𝒮i depends only on the fixed inputs to the circuit 𝒞 and the gates of 𝒞 in layers 1,,i1.

Since both the domain and the range are Euclidean spaces, the absolute determinant |detMi| is independent of the choices of bases when writing Mi as matrix in 3×3. We will show that |detMi| is basically the lower bound that we seek for, via the following propositions whose proof can be found in the full version.

Proposition 18.

It always holds that

ρiρiF2k|detMi|τi1τi1F.
Proposition 19.

For each fixed domain 𝒮i, detMi is a degree-6 semi-polynomial in the entries of Gi.

Proposition 20.

There exists a constant μk>0 such that for every possible domain 𝒮i,

𝐄Gi𝒰(2k)[|detMi|2]μk.

Now we are ready to prove Lemma 17.

Proof of Lemma 17.

Applying Theorem 6 with Propositions 19 and 20 gives

Pr[2k|detMi|ε] Pr[|detMi|222kμk1ε2𝐄[|detMi|2]]
C(2k,6)(22kμk1ε2)C(2k,6) (27)

which holds for every domain 𝒮i and every ε0. We define Λk as the distribution over [0,) with the following cumulative function:

Pr[Λkx]=min{C(2k,6)(22kμk1x2)C(2k,6),1}.

Take t=C(2k,6)>0 and let C=C(2k,6)(22kμk1)C(2k,6)>0, then we have

𝐄[Λkt] =0xtdPr[Λkx]
=0C1/(2t)xtd(Cx2t)
=0C1/(2t)2tCxt1dx=2tC1/2<. (28)

Now suppose the input qubits other than ρ are fixed, and the layers 1,,i1 of the circuit 𝒞 is given. This fixes the domain 𝒮i for Mi, and provides the cumulative function

P(x)=Pr[2k|detMi|x].

Notice that P is continuous and non-decreasing, and by defining its inverse P1(y)=supxP(x)y on [0,1], we can show that for every y[0,1],

Pr[P(2k|detMi|)y]=Pr[2k|detMi|P1(y)]=P(P1(y))=y.

We then define the function λi:𝕌(2k)[0,) as follows: For each Gi𝕌(2k), let λi(Gi) be the smallest λ0 such that

P(2k|detMi|)=Pr[Λkλ].

When Gi𝒰(2k), we have λi(Gi)Λk since

Pr[λi(Gi)x]=Pr[P(2k|detMi|)Pr[Λkx]]=Pr[Λkx]. (29)

We also have 2k|detMi|λi(Gi) since P(x)Pr[Λkx] holds for all x0. Combined with Proposition 18 we get

ρiρiF2k|detMi|τi1τi1Fλi(Gi)τi1τi1F.

5 Applications

5.1 Depth Lower Bound for Approximate Designs

In this section we prove Theorem 2. We first recall the definition of an approximate unitary design.

Definition 21.

For a distribution 𝒟 over 𝕌(n) and t+, define the moment superoperator as the following channel:

Φ𝒟(t):ρ𝕌(n)Utρ(U)td𝒟(U).

The distribution 𝒟 is an ε-approximate unitary t-design if

Φ𝒟(t)Φ𝒰(n)(t)ε.

Note that there are several other definitions of the approximate design (see e.g. [10]), and we choose the weaker one so that our Theorem 2 is still compatible with the stronger definitions of designs.

Proof of Theorem 2.

Without loss of generality, let us assume that the first input qubit ρ and the first output qubit π are depth D apart. We fix all other input qubits to be maximally mixed, so that when ρ is also maximally mixed, the entire output is maximally mixed regardless of the circuit 𝒞, and thus π=I/2. On the other hand, when ρ=|00|, we know the following about the output qubit π via Theorem 1 that with probability 12D over the circuit 𝒞,

πI/2F|00|I/2F(22D)ck=1222Dck. (30)

We can expand the left hand side of Equation 30 as

πI/2F2=Tr[(πI/2)2]=Tr[π2]1/2. (31)

Since Tr[π2]1 always holds, we get

𝐄𝒞[Tr[π2]]12+1224Dck+122D. (32)

Now imagine feeding two copies of the input state |00|(I/2)(n1) to the superoperators Φ𝒞(2) and Φ𝒰(n)(2), and apply a swap test on the first output qubits in the two copies. The output probability is determined by Tr[π2]. We know already from [20] that when going through an n-qubit Haar random unitary, we have 𝐄𝒰(n)[Tr[π2]]=1/2. Therefore, we conclude that the difference 24Dck+2DO(ε) which means that DΩk(logε1).

5.2 Depth Test

In this section we prove Theorem 3, where we learn the exact depth of a brickwork random circuit 𝒞.

Algorithm 1 Algorithm for depth testing.

The processed is described in Algorithm 1. Here c2 is the constant ck in Theorem 1 with k=2 for brickwork circuits, and γ>0 is the target error probability. Notice that in a brickwork circuit of depth D, the (D+2)-th output qubit lies outside the lightcone of the first input qubit. Therefore, when the algorithm iterates to the correct depth D, we have π=π and D must be returned even when both π and π are estimated with ε error.

On the other hand, when D is smaller than the actual depth, the (D+2)-th output qubit lies inside the lightcone of the first input qubit. By Theorem 1, with probability 12Dγ over 𝒞 we have

ππF|00||11|F(22Dγ)c2>4ε. (33)

This means when both π and π are estimated with ε error, we still have ππF>2ε. By a union bound over D, with probability 1γ all those D smaller than the actual depth will be skipped, and thus the outputted depth is correct.

Note that the efficiency of the algorithm depends on the single-qubit tomography process, which by Proposition 11 is poly(1/ε). As a conclusion, we obtain the following more general statement which implies Theorem 3:

Theorem 22.

Let 𝒞 be a brickwork random quantum circuit of an unknown depth D , where each gate is independently Haar random.. Given oracle access to 𝒞, for any γ(0,1), Algorithm 1 outputs D with probability at least 1γ in time poly(2D,γ1).

 Remark 23.

The only property of the brickwork architecture we used here is that the set of qubits within the lightcone of an input qubit is strictly expanding when the depth grows, which allows us to distinguish between different depths. Therefore the algorithm can be easily modified, with the same efficiency, to work with higher dimensional brickwork circuits and other architectures.

5.3 Learning Brickwork Random Circuits

5.3.1 Learning the First Gate

Here we prove Theorem 4, where we learn the gate G1,1, namely the gate in the first layer acting on the first and second qubit, in a brickwork circuit of depth D=O(logn) with Haar random gates. The same arguments also work for other gates in the first layer.

To learn G1,1, we try to uncompute G1,1 by first apply some two-qubit unitary G𝕌(4) and then apply the circuit . We distinguish whether G is close to G1,1 or not using the similar idea as in Section 5.2. Specifically, if G=G1,1 so that G perfectly uncomputes the gate G1,1, then the (D+1)-th output qubit will lie outside the lightcone of the first input qubit. Note that this is also true when G cancels G1,1 into unentangled single-qubit gates, that is when there exists U1,U2𝕌(2) that G1,1G=U1U2. In contrast, when G does not cancel G1,1 into unentangled single-qubit gates, the first two qubits will be entangled after the first layer of gates, and thus the (D+1)-th output qubit will be affected when the first input qubit changes.

To put the above intuition more formally, we first define the distance between two-qubit gates when taking the quotient over unentangled single-qubit gates:

Definition 24.

For G,G𝕌(4), we define the distance

d(G,G)=minU1,U2𝕌(2)d(G,(U1U2)G).

We note that d, like the diamond distance d, is a pseudometric on 𝕌(4). That is, a metric except that two distinct unitaries could have distance zero. However, d(G,G)=0 if and only if GG1=U1U2 for some U1,U2𝕌(2).

The learning algorithm is described in Algorithm 2, with δ,γ>0 being the target error rate. Notice that within each loop of σ2, the second input qubit ρ2 is fixed, while the first one changes with a difference σ1 that goes through the Pauli basis. The input qubits ρ1 and ρ2 are Pauli eigenstates except when σ2=ρ2=I/2, which can be obtained by randomly choosing |0 or |1.

Algorithm 2 Algorithm for learning the gate G1,1.

To prove the correctness of the algorithm, we need the following lemmas that connects the distance d(U,II) with the behavior of U over the Pauli basis.

Lemma 25.

For U𝕌(4), if d(U,II)δ then for every σ1{X,Y,Z} and σ2{I,X,Y,Z},

TrA[U(σ1σ2)U]F2δ,

where TrA is the partial trace that traces out the first qubit.

Lemma 26.

For U𝕌(4), if for every σ1{X,Y,Z} and σ2{I,X,Y,Z} we have

TrA[U(σ1σ2)U]Fδ,

then d(U,II)20δ.

The proof of Lemma 26 is rather technical and thus is omitted in this version. For now, let us show how Lemmas 25 and 26 would imply the completeness and the soundness of Algorithm 2.

We apply Theorem 1 to the circuit 𝒞 minus its first layer, which is a circuit of depth D1. Notice that among the input qubits to the second layer of 𝒞, the third to n-th qubits only depends on the gates G1,3,,G1,n and thus can be viewed as fixed. The first qubit does not affect the (D+1)-th output qubit and thus its entire lightcone can be removed from the picture. That leaves us the second qubit, which is

TrA[G1,1G(ρ1ρ2)GG1,1].

Therefore, with ρ1 changed with a difference σ1 and ρ2=(I+σ2)/2 unchanged, Theorem 1 implies that with probability 1γ, the following holds for every G.

ππFTrA[G1,1G(σ1ρ2)GG1,1]F(2D+1γ)c2. (34)

Meanwhile, Lemma 12 implies that

ππFTrA[G1,1G(σ1ρ2)GG1,1]F2. (35)

For completeness, since we take G from an ε-net, the algorithm must have tested some G with d(G1,1,G)=d(G1,1G,II)εδ. Hence by Lemma 25 and Equation 35, for such G it always holds that ππF22ε, and thus G will not be rejected even with ε tomography errors in π and π.

For soundness, assume that d(G1,1,G)>δ, then by Lemma 26 we know that for some σ1{X,Y,Z} and σ2{I,X,Y,Z},

TrA[G1,1G(σ1σ2)GG1,1]F>1400δ2. (36)

As σ2=2ρ2I, that means there exists some ρ2 such that

TrA[G1,1G(σ1ρ2)GG1,1]F>11200δ2. (37)

Thus by Equation 34 we have ππF>δ2(2D+1γ)c2/1200>7ε, and G will be rejected when π and π are estimated with ε error.

The efficiency of the algorithm depends on the size of the ε-net and the state tomography process, which are both poly(1/ε)=poly(1/δ,1/γ). Notice that the algorithm similarly works for every gate in the first layer, and as a result, we obtained the following formal statement of Theorem 4:

Theorem 27.

Let 𝒞 be a brickwork random quantum circuit of depth D, where each gate is independently Haar random. Let G1,1 be the gate in the first layer of 𝒞 that acts on the first and second qubit. Given oracle access to 𝒞, for any δ,γ(0,1), with probability at least 1γ over 𝒞, Algorithm 2 outputs some G𝕌(4) such that d(G,G1,1)δ in time poly(2D,1/δ,1/γ).

5.3.2 Learning the Circuit with Discretized Distribution

It is tempting to use Theorem 27 to learn the entire circuit 𝒞. Indeed, if the statement is errorless that d(G,G1,1)=0, we could view the single-qubit gates G1,1G=U1U2 as part of the second layer. That means after learning the first layer, we can perfectly uncompute it and hence use Algorithm 2 to learn the second layer, and proceed until we are only left with single qubit gates, which are easily learnable.

However, when there are learning errors, which are inevitable for a continuous gate distribution like 𝒰(4), the above framework runs into a problem. Since we cannot perfectly uncompute the first layer, the inputs to the rest of the circuit are not clean enough: In particular, the error in σ1ρ2 could have much larger influence on the output difference ππ than σ1 itself. To control the influence of the errors, we need to reduce the learn error in the previous layer to be polynomially smaller than the target error in the current layer, and therefore a circuit of depth D=Θ(logn) would require error as small as 2Ω(log2n) and incur quasi-polynomial running time.

Here we present a bypass to the problem which allows us to prove an errorless version of Theorem 27 and thus make the proposed framework work. The idea is to change the distribution from 𝕌(4) into a discrete one that approximates 𝕌(4). Intuitively, any ε-net where the elements are distributed according to 𝒰(4) would be a good approximation. We formalize this intuition as the following:

Definition 28.

An ε-net of a distribution 𝒟 over a pseudometric space (S,d) is a distribution 𝒟ε over S with a finite support, such that 𝒟ε=f(𝒟) for some (possibly randomized) map f:SS, with the following properties:

  • For every xS, d(x,f(x))ε.

  • For every x1,x2S, either f(x1)=f(x2) or d(f(x1),f(x2))ε.

Notice that under Definition 28, the set supp𝒟ε is indeed an ε-net in the normal sense. Actually, the definition is general enough so that we can first choose any ε-net as the support, remove the redundant elements with zero distances, and then take f to be an arbitrary rounding scheme into the support. We show that 𝒟ε approximates 𝒟 via the following lemma.

Lemma 29.

If F:S is L-Lipschitz, that is for all x1,x2S,

|F(x1)F(x2)|Ld(x1,x2),

then for every δ we have

Prx𝒟ε[F(x)δ]Prx𝒟[F(x)δ+εL].

From now on, for each ε>0 we fix some ε-net of the Haar measure 𝒰(4) under the d distance, and denote it by 𝒰ε(4). We will show that when the gates in the brickwork circuit are drawn the net, we can actually use the framework at the start of this section to learn the circuit. To do so, we first prove an errorless version of Theorem 27 as follows.

Theorem 30.

Let 𝒞 be a brickwork random quantum circuit of depth D, where each gate is independently drawn from 𝒰ε(4). Let G1,1 be the gate in the first layer of 𝒞 that acts on the first and second qubit. Given oracle access to 𝒞, for every γ(0,1) there is an algorithm that with probability at least 1γ over 𝒞 outputs G1,1 in time poly(2D,1/γ).

Proof.

The algorithm is basically the same as Algorithm 2, except that we now iterate G through the support of 𝒰ε(4). The proof is also mostly the same: When G=G1,1, we have π=π and thus G will not be rejected; Otherwise d(G,G1,1)ε, and the proof goes through as long as we have the corresponding version of Theorem 1.

Since Theorem 1 is proved via Lemma 17, it suffices to prove Lemma 17 where 𝒰(4) is replaced with 𝒰ε(4). The crux is to prove the inequality Equation 27, that is for some C,C>0, it holds for all x0 that

Pr[|detM|x]CxC, (38)

where M is the matrix form of the linear map M:ττTrA[G(ττ)G], for ττ in a certain fixed 3-dimensional subspace of Δ2.

Note that by Proposition 18, each entry of M is in [2,2], while by Proposition 19, each entry of M is a Lipschitz function of G under distance d. This is because when G,G𝕌(4) that d(G,G)δ corresponds to matrices M and M, for any ττΔ2 and σΔ1 with ττF=σF=1 we have

|Tr[σM(ττ)]Tr[σM(ττ)]|2δ. (39)

As detM consists of 6 monomials of degree 3 in the entries of M, we conclude that |detM| is 2336=144-Lipschitz in G under d. But when G=(U1U2)G we have M=U2MU2 which means |detM|=|detM|, and thus |detM| is also 144-Lipschitz in G under d.

As a result, since we already know that Equation 38 holds when G𝒰(4), by Lemma 29 we have

PrG𝒰ε(4)[|detM|x]PrG𝒰(4)[|detM|x+144ε]C(x+144ε)C. (40)

However, this will not yield Lemma 17 as the bound is even non-zero when x=0. Fortunately, we can simply use the union bound to ignore the cases when |detM|ε for any gate G on the path, which will only add poly(ε)D to the error probability γ. And conditioned on |detM|>ε, for every x0 we have

PrG𝒰ε(4)[|detM|x]C(145x)C, (41)

which allows us to prove Lemma 17 on 𝒰ε(4), albeit with different constants.

As a result, we can use Theorem 30 to exactly learn the circuit 𝒞 layer by layer, and obtain Theorem 5 formally as follows.

Theorem 31.

Let 𝒞 be a brickwork random quantum circuit on n qubits of depth D, where each gate is independently drawn from 𝒰ε(4). Given oracle access to 𝒞, for every γ(0,1) there is an algorithm that with probability at least 1γ outputs 𝒞 in time poly(n,2D,1/γ).

References

  • [1] Scott Aaronson and Alex Arkhipov. The computational complexity of linear optics. In Proceedings of the 43rd ACM Symposium on Theory of Computing, STOC 2011, San Jose, CA, USA, 6-8 June 2011, STOC ’11, pages 333–342, New York, NY, USA, 2011. Association for Computing Machinery. doi:10.1145/1993636.1993682.
  • [2] Scott Aaronson and Shih-Han Hung. Certified randomness from quantum supremacy. In Proceedings of the 55th Annual ACM Symposium on Theory of Computing, STOC 2023, pages 933–944, New York, NY, USA, 2023. Association for Computing Machinery. doi:10.1145/3564246.3585145.
  • [3] Frank Arute et al. Quantum supremacy using a programmable superconducting processor. Nature, 574(7779):505–510, October 2019. doi:10.1038/s41586-019-1666-5.
  • [4] Roozbeh Bassirian, Adam Bouland, Bill Fefferman, Sam Gunn, and Avishay Tal. On certified randomness from fourier sampling or random circuit sampling, 2024. arXiv:2111.14846.
  • [5] Bruno Bertini and Lorenzo Piroli. Scrambling in random unitary circuits: Exact results. Phys. Rev. B, 102:064305, August 2020. doi:10.1103/PhysRevB.102.064305.
  • [6] Sergio Boixo, Sergei V. Isakov, Vadim N. Smelyanskiy, Ryan Babbush, Nan Ding, Zhang Jiang, Michael J. Bremner, John M. Martinis, and Hartmut Neven. Characterizing quantum supremacy in near-term devices. Nature Physics, 14(6):595–600, April 2018. doi:10.1038/s41567-018-0124-x.
  • [7] Adam Bouland, Bill Fefferman, Zeph Landau, and Yunchao Liu. Noise and the frontier of quantum supremacy. In 2021 IEEE 62nd Annual Symposium on Foundations of Computer Science (FOCS). IEEE, February 2022. doi:10.1109/focs52979.2021.00127.
  • [8] Adam Bouland, Bill Fefferman, Chinmay Nirkhe, and Umesh Vazirani. On the complexity and verification of quantum random circuit sampling. Nature Physics, 15(2):159–163, October 2018. doi:10.1038/s41567-018-0318-2.
  • [9] Paolo Braccia, Pablo Bermejo, Lukasz Cincio, and M. Cerezo. Computing exact moments of local random quantum circuits via tensor networks, 2024. arXiv:2403.01706.
  • [10] Fernando G.S.L. Brandão, Aram W. Harrow, and Michał Horodecki. Local random quantum circuits are approximate polynomial-designs. Commun. Math. Phys., 346(2):397–434, 2016. doi:10.1007/s00220-016-2706-8.
  • [11] Winton Brown and Omar Fawzi. Scrambling speed of random quantum circuits, 2013. arXiv:1210.6644.
  • [12] Anthony Carbery and James Wright. Distributional and Lq norm inequalities for polynomials over convex bodies in n. Mathematical Research Letters, 8(3):233–248, 2001. doi:10.4310/mrl.2001.v8.n3.a1.
  • [13] Chi-Fang Chen, Adam Bouland, Fernando G. S. L. Brandão, Jordan Docter, Patrick Hayden, and Michelle Xu. Efficient unitary designs and pseudorandom unitaries from permutations, 2024. doi:10.48550/arXiv.2404.16751.
  • [14] Chi-Fang Chen, Jordan Docter, Michelle Xu, Adam Bouland, and Patrick Hayden. Efficient unitary t-designs from random sums, 2024. doi:10.48550/arXiv.2402.09335.
  • [15] Chi-Fang Chen, Jeongwan Haah, Jonas Haferkamp, Yunchao Liu, Tony Metger, and Xinyu Tan. Incompressibility and spectral gaps of random circuits, 2024. doi:10.48550/arXiv.2406.07478.
  • [16] Chi-Fang Chen and Andrew Lucas. Operator growth bounds from graph theory. Communications in Mathematical Physics, 385(3):1273–1323, July 2021. doi:10.1007/s00220-021-04151-6.
  • [17] Chi-Fang Chen, Andrew Lucas, and Chao Yin. Speed limits and locality in many-body quantum dynamics. Reports on Progress in Physics, 86(11):116001, September 2023. doi:10.1088/1361-6633/acfaae.
  • [18] Alexander M. Dalzell, Nicholas Hunter-Jones, and Fernando G. S. L. Brandão. Random quantum circuits anticoncentrate in log depth. PRX Quantum, 3(1), March 2022. doi:10.1103/prxquantum.3.010333.
  • [19] Christoph Dankert, Richard Cleve, Joseph Emerson, and Etera Livine. Exact and approximate unitary 2-designs and their application to fidelity estimation. Phys. Rev. A, 80:012304, July 2009. doi:10.1103/PhysRevA.80.012304.
  • [20] Joseph Emerson, Robert Alicki, and Karol Zyczkowski. Scalable noise estimation with random unitary operators. Journal of Optics B: Quantum and Semiclassical Optics, 7, March 2005. doi:10.1088/1464-4266/7/10/021.
  • [21] Bill Fefferman, Soumik Ghosh, Michael Gullans, Kohdai Kuroiwa, and Kunal Sharma. Effect of non-unital noise on random circuit sampling, 2023. doi:10.48550/arXiv.2306.16659.
  • [22] Matthew P.A. Fisher, Vedika Khemani, Adam Nahum, and Sagar Vijay. Random quantum circuits. Annual Review of Condensed Matter Physics, 14(1):335–379, 2023. doi:10.1146/annurev-conmatphys-031720-030658.
  • [23] Jeongwan Haah, Yunchao Liu, and Xinyu Tan. Efficient approximate unitary designs from random pauli rotations, 2024. doi:10.48550/arXiv.2402.05239.
  • [24] Jonas Haferkamp. Random quantum circuits are approximate unitary t-designs in depth O(nt5+o(1)). Quantum, 6:795, September 2022. doi:10.22331/q-2022-09-08-795.
  • [25] Dominik Hangleiter, Juan Bermejo-Vega, Martin Schwarz, and Jens Eisert. Anticoncentration theorems for schemes showing a quantum speedup. Quantum, 2:65, May 2018. doi:10.22331/q-2018-05-22-65.
  • [26] Dominik Hangleiter and Michael J. Gullans. Bell sampling from quantum circuits. Phys. Rev. Lett., 133:020601, July 2024. doi:10.1103/PhysRevLett.133.020601.
  • [27] Aram W. Harrow, Linghang Kong, Zi-Wen Liu, Saeed Mehraban, and Peter W. Shor. Separation of out-of-time-ordered correlation and entanglement. PRX Quantum, 2:020339, June 2021. doi:10.1103/PRXQuantum.2.020339.
  • [28] Aram W. Harrow and Richard A. Low. Random quantum circuits are approximate 2-designs. Communications in Mathematical Physics, 291(1):257–302, July 2009. doi:10.1007/s00220-009-0873-6.
  • [29] Aram W. Harrow and Saeed Mehraban. Approximate unitary t-designs by short random quantum circuits using nearest-neighbor and long-range gates. Commun. Math. Phys., 401(2):1531–1626, 2023. doi:10.1007/s00220-023-04675-z.
  • [30] Patrick Hayden and John Preskill. Black holes as mirrors: quantum information in random subsystems. Journal of High Energy Physics, 2007(09):120–120, September 2007. doi:10.1088/1126-6708/2007/09/120.
  • [31] Hsin-Yuan Huang, Yunchao Liu, Michael Broughton, Isaac Kim, Anurag Anshu, Zeph Landau, and Jarrod R. McClean. Learning shallow quantum circuits. In Proceedings of the 56th Annual ACM Symposium on Theory of Computing, STOC 2024, pages 1343–1351, New York, NY, USA, 2024. Association for Computing Machinery. doi:10.1145/3618260.3649722.
  • [32] Nicholas Hunter-Jones. Unitary designs from statistical mechanics in random quantum circuits, 2019. arXiv:1905.12053.
  • [33] Shao-Kai Jian, Gregory Bentsen, and Brian Swingle. Linear growth of circuit complexity from brownian dynamics, 2022. arXiv:2206.14205.
  • [34] Daniel Kane. A structure theorem for poorly anticoncentrated polynomials of gaussians and applications to the study of polynomial threshold functions. The Annals of Probability, 45(3):1612–1679, 2017. doi:10.1214/16-AOP1097.
  • [35] Zeph Landau and Yunchao Liu. Learning quantum states prepared by shallow circuits in polynomial time, 2024. doi:10.48550/arXiv.2410.23618.
  • [36] Elliott H. Lieb and Derek W. Robinson. The finite group velocity of quantum spin systems. Communications In Mathematical Physics, 28(3):251–257, September 1972. doi:10.1007/BF01645779.
  • [37] Yunchao Liu, Matthew Otten, Roozbeh Bassirianjahromi, Liang Jiang, and Bill Fefferman. Benchmarking near-term quantum computers via random circuit sampling, 2022. arXiv:2105.05232.
  • [38] Shachar Lovett. An elementary proof of anti-concentration of polynomials in gaussian variables. Electronic Colloquium on Computational Complexity (ECCC), 2010. URL: https://eccc.weizmann.ac.il/report/2010/182.
  • [39] Elizabeth S Meckes. The random matrix theory of the classical compact groups, volume 218. Cambridge University Press, 2019. doi:10.1017/9781108303453.
  • [40] Raghu Meka, Oanh Nguyen, and Van Vu. Anti-concentration for polynomials of independent random variables. Theory of Computing, 12(11):1–17, 2016. doi:10.4086/toc.2016.v012a011.
  • [41] Raghu Meka and David Zuckerman. Pseudorandom generators for polynomial threshold functions. SIAM Journal on Computing, 42(3):1275–1301, 2013. doi:10.1137/100811623.
  • [42] Tony Metger, Alexander Poremba, Makrand Sinha, and Henry Yuen. Simple constructions of linear-depth t-designs and pseudorandom unitaries, 2024. doi:10.48550/arXiv.2404.12647.
  • [43] A. Morvan et al. Phase transition in random circuit sampling, 2023. arXiv:2304.11119.
  • [44] Ramis Movassagh. The hardness of random quantum circuits. Nature Physics, 19(11):1719–1724, November 2023. doi:10.1038/s41567-023-02131-2.
  • [45] Adam Nahum, Jonathan Ruhman, Sagar Vijay, and Jeongwan Haah. Quantum entanglement growth under random unitary dynamics. Physical Review X, 7(3), July 2017. doi:10.1103/physrevx.7.031016.
  • [46] Adam Nahum, Sagar Vijay, and Jeongwan Haah. Operator spreading in random unitary circuits. Phys. Rev. X, 8:021014, April 2018. doi:10.1103/PhysRevX.8.021014.
  • [47] Michael A. Nielsen and Isaac L. Chuang. Quantum Computation and Quantum Information: 10th Anniversary Edition. Cambridge University Press, 2010.
  • [48] Erdős Paul and Alfréd Rényi. On a classical problem of probability theory. Magyar Tud. Akad. Mat. Kutató Int. Közl, 6(1):215–220, 1961.
  • [49] Lorenzo Piroli, Christoph Sünderhauf, and Xiao-Liang Qi. A random unitary circuit model for black hole evaporation. Journal of High Energy Physics, 2020(4), April 2020. doi:10.1007/jhep04(2020)063.
  • [50] Thomas Schuster, Jonas Haferkamp, and Hsin-Yuan Huang. Random unitaries in extremely low depth, 2024. doi:10.48550/arXiv.2407.07754.
  • [51] Henrik Wilming and Albert H. Werner. Lieb-robinson bounds imply locality of interactions. Phys. Rev. B, 105:125101, March 2022. doi:10.1103/PhysRevB.105.125101.
  • [52] Lisa Yang and Netta Engelhardt. The complexity of learning (pseudo)random dynamics of black holes and other chaotic systems, 2023. arXiv:2302.11013.
  • [53] Tianci Zhou, Shenglong Xu, Xiao Chen, Andrew Guo, and Brian Swingle. Operator lévy flight: Light cones in chaotic long-range interacting systems. Phys. Rev. Lett., 124:180601, May 2020. doi:10.1103/PhysRevLett.124.180601.